Conference Presentations

Preventing Web Service Security Breaches

Because Web services are especially vulnerable to security breaches, verifying the integrity of Web services is critical to successful deployment. By adopting specific white-box testing techniques at the unit and system level, testers can better ensure the security and dependability of the Web services application their company produces. Learn what you can do to test Web services for conditions and input data that are not expected and fix security problems before they harm your organization.

  • Find security problems with specific white-box test techniques
  • Ensure proper functionality, interoperability, and security of Web services
  • Web services testing issues for developers and QA testers
Gary Brunell, ParaSoft Corporation
Planned Chaos: Malicious Test Day

In a test and verification organization, it can be easy to fall into predictable ruts and miss finding important defects. Use the creativity of your test team, developers, users, and managers to find those hidden bugs before the software goes into production. Ted Rivera details how his organization conceived of, administers, evaluates, and benefits from periodic malicious test days. Learn ways to make your days of planned chaos productive, valuable, and, yes, even fun. Give both testers and non-testers an opportunity to find inventive ways to break your products and you'll get some surprising results.

  • The danger of too much predictability and the results you can expect from a malicious test day
  • Create and administer your own malicious test day
  • Maximize the benefits of malicious test days
Ted Rivera, Tivoli/IBM Quality Assurance
Influencing Others: Business Speak for Testers

One of the major goals of testing is to provide information to decision-makers about the quality of the product under test and the risks of releasing or not releasing the software. But whether or not management hears what we have to say depends on how we deliver the message. The truth is management often doesn't care about the number of defects or their severity level; instead, they care about revenue, costs, and customer impact. Find out more about what motivates managers and how to frame test results and status about product quality and product risks in language managers will understand. Learn how to present the business case clearly and convincingly. Then let the chips fall where they may.

  • Key skills you need to influence decisions for the good of the organization
  • How to assess risk and their effects and present a strong case
Esther Derby, Esther Derby Associates Inc
STAREAST 2004: Model-Based Testing for Java and Web-Based GUI Applications

Model-based testing for Java applications is difficult with many of the tools existing today, thus requiring a scripting language that allows for the creation and manipulation of complex data structures and more. Learn about the obstacles to implementing model-based testing for Java and HTML applications and the programming required for model-based testing. During the presentation, Jeff Feldstein demonstrates how to use XDE Tester's ScriptAssure and Java to create an HTML application model.

  • References for implementing the required data structures in Java for modeling
  • Pitfalls to avoid in creating the model
  • Automatically adapt test cases to changes in the application's GUI
Jeff Feldstein, Cisco Systems Inc.
Looking Past "The Project" with Open-Source Tools

It is often difficult for testers and test teams to look beyond their current project. However, software test automation works best within frameworks that address all projects not just one. Today many people and organizations are solving some or all of their test automation troubles with open-source tools that share solutions and development resources and support. Carl Nagle will demonstrate how to reap solutions from others solving the same problems and tap into external development and support resources.

  • The benefits of SAFSDEV's open-source test automation
  • Demonstration of STAF and the SAFSDEV framework in action
  • Join the open-source movement and contribute to the industry's testing tools and frameworks
Carl Nagle, SAS Institute Inc
Testing Web Services Interoperability

If your development organization is developing Web services because you want independence across languages and platforms, you'll need to undertake serious interoperability testing. John Scarborough explains the problem by creating a matrix of interoperability issues and explores possible testing strategies you might use. He also takes a sober look at what we may not be able to tackle with existing testing technology. Find out about SOAP monitoring and other approaches to interoperability testing. Take away a new understanding of how the desire for interoperability can open up opportunities for hackers and the likelihood of security breaches.

  • The matrix for interoperability testing of Web services
  • Web services testing experiences from both small and large companies
  • The need for designing interoperability testing into the software from the beginning
John Scarborough, Disha Technologies Inc.
Quality Metrics for Testers: Evaluating Our Products -- Evaluating Ourselves

Most programmers learn very little about testing techniques in school. This has a ripple effect through the software development cycle, often leaving quality issues until too late in the project. In this interactive, and hands-on session, you'll learn about and have a chance to experience practical, and even entertaining, methods for teaching programmers to be more proficient testers. Use this learning experience as an opportunity for team building while improving your development and test process. You will receive training materials that can be used as-is or modified for specific companies, industries, and technologies.

  • Counteract the negative impact from inadequate unit and integration testing
  • Reduce one constraint on implementing test-centric, agile software development
Lee Copeland, Software Quality Engineering
Enabling Technologies for Outsourced Testing

The outsourcing of test case development, automation, and execution presents opportunities for some organizations seeking new sources of competitive advantage. Compared to software development outsourcing, test outsourcing has unique technical requirements that must be understood and carefully managed. Based on his experiences, Rob Spade explains the ideal technical capabilities you need for test outsourcing. Find out what you need to know about test management infrastructures, remote test lab configuration, real-time collaboration across different time zones, monitoring capabilities, statistical analysis, and much more.

  • The benefits and payback potentials for outsourced testing
  • Enabling technologies required for effective outsourced testing
  • Use these same technologies for remote and multi-site testing for in-house test activities
Rob Spade, Lumenare Networks
User Community Modeling Language (UCML) for Performance Testing Workloads

Performance testers use various methods to describe user workloads-scenarios, operational profiles, and more. Understanding these workloads and accurately simulating them is one key to developing useful performance tests. Scott Barber introduces a User Community Modeling Language (UCML) that he has used to describe and effectively communicate user workloads. With an interactive example, he shows the usage pattern of a sample application and builds a UCML diagram and supporting information to represent usage in an intuitive, easy-to-understand way. See how you can employ the User Community Modeling Language to supplement your existing workload distributions.

  • Value of representing workload distributions visually for performance testing
  • How to create and use UCML diagrams to aid in data gathering in your organization
Scott Barber, Authentec
Ongoing Retrospectives: Project Reviews That Work

As evaluators of quality, testers can often identify critical software development problems during the process. So, how do you get other members of the development team to take notice? Lauri MacKinnon offers real-world case studies to illustrate how ongoing project retrospectives make for better testing and higher quality software. She describes ways to get objective data from project reviews done during the project, giving your team a better chance of making timely adjustments. Learn the basics of conducting a project review and interpreting the resulting data. Then, turn this data into useful process improvement changes within the test group and the rest of the software development department.

  • Project reviews throughout the development cycle for continuous feedback
  • A way to improve testing and other development activities during the project, not after
Lauri MacKinnon, Phase Forward Inc

Pages

CMCrossroads is a TechWell community.

Through conferences, training, consulting, and online resources, TechWell helps you develop and deliver great software every day.