STARCANADA 2017 - Security Testing

In many organizations, agile development processes are driving the pursuit of faster software releases, which has spawned a set of new practices called DevOps. DevOps stresses communications and integration between development and operations, including rapid deployment, continuous integration, and continuous delivery. Because DevOps practices require confidence that changes made to the code base will function as expected, automated testing is essential. Join Jeffery Payne as he discusses the unique challenges associated with integrating automated testing into continuous integration/...

Today’s software applications are often security critical, making security testing essential in a software quality program. Unfortunately, most testers have not been taught how to effectively test the security of the software applications they validate. Join Jeffery Payne as he shares what you need to know to integrate effective security testing into your everyday software testing activities. Learn how software vulnerabilities are introduced into code and exploited by hackers. Discover how to define and validate security requirements. Explore effective test techniques for assuring that...

Test automation scripts are largely run against stable functionality with repeatable results. But automation does not have to be just about running reliable tests against a fixed code base to make them effective; rather, you can determine the right level of automation you need to meet your project’s needs. Three levels of test automation will be discussed in this presentation: Level 1 tests exercise the simplest aspect of functionality in a module, Level 2 tests explore all module aspects except interfaces to other components, and Level 3 tests examine the deepest level of functionality in...

Stories help us learn. They can be fun or scary, exciting or relaxing. People worldwide tell and listen to stories. We access them through books, film, TV, and computers. But direct, face-to-face storytelling is still a powerful experience. When Isabel Evans was young, there was a program on the radio called Listen with Mother. For fifteen minutes, mothers and children across the land would sit and listen to a story. Join Isabel and become your younger child, bring your testing parent, and listen to her stories. In fifteen-minute sections, Isabel recounts stories drawn from myths, legends...

Sabermetrics turned the baseball world upside down by challenging decades-old measures of individual performance and their perceived linkage to team success. After cementing their legacy as the Lovable Losers for 108 years, the Chicago Cubs were able to leverage a data-driven approach to finally win a World Series. An Arkansas high school football coach, devoted to statistical analysis, has won three state championships—by never punting. Formula 1 racing teams collect staggering amounts of telemetry data from their race cars for the purpose of eking out seconds during the course of a race...

Are there any great scripted tests? Rob Sabourin shares dozens of examples of test scripts from software development projects. In this talk you will be exposed to the good, the bad, and the ugly side of test scripting. You will see some test scripts which have helped to drive profitable businesses, and other test scripts which have almost brought about corporate ruin. Rob explores the many context drivers behind testing, highlighting when and how they can help you focus on what matters. You will see many types of test scripts: smoke tests, FAST tests, business facing regression tests,...