STAREAST 2018 - Security Testing

Let’s build a mobile app quality and testing strategy together. Whether you have a web, hybrid, or native app, building a quality and testing strategy means (1) knowing what data and tools you have available to make agile decisions, (2) understanding your customers and your competitors, and (3) testing your app under real-world conditions. Jason Arbon guides you through the latest techniques, data, and tools to ensure the awesomeness of your mobile app quality and testing strategy. Leave this interactive session with a strategy for your very own app—or one you pretend to own. The...

Knowledge of Selenium, the industry-standard tool for testing web applications, is a much sought after skill in today’s world of test automation. If you want to learn Selenium, then this full-day tutorial provides a great start. Titus Fortner shows you how to build test automation using Selenium. But he doesn’t stop there. He uses his years of experience to show you how to build automation that is clean and easy to maintain. Titus introduces other tools that work with Selenium to help manage the data used to drive your tests, evaluate JavaScript-heavy applications, manage your test...

No longer just a futuristic concept, the Internet of Things (IoT) has a strong presence in today’s world. If your business is not prepared for it, you’re already behind. With the proliferation of connected “things”—devices, appliances, cars, and even clothing—Jennifer Bonine says that the stage is set. IoT apps are here to stay. Testing, product management, and development teams must address developing and testing in this paradigm. Testers, accustomed to traditional platforms, are now asked to test on more complex devices and more advanced platforms. Testers must keep up with the demand...

Web applications are often security critical or serve as front-ends for security critical applications, making web testing for vulnerabilities an essential part of software testing. Unfortunately, most software testers have not been taught how to identify web security issues while testing applications. Join Jeffery Payne as he shares what you need to know to security test web-based applications as part of your overall testing process. Learn about the most common web security vulnerabilities and how they are introduced into web code and exploited by hackers. Explore test techniques for...

Software continues to revolutionize the world—impacting nearly every aspect of our work, family, and personal life. Artificial intelligence (AI) and machine learning (ML) are playing key roles in this revolution through improvements in search results, recommendations, forecasts, and other predictions. AI and ML technologies are being used in platforms for digital assistants, home entertainment and automation, medical diagnosis, customer support, and autonomous vehicles. Testing practitioners are recognizing the potential for advances in AI and ML to be leveraged for automated testing—an...

Do you have access to lots and lots of test, development, app, and service data—really big data—from client and cloud service log files, test execution results, and more? Then, you have a great opportunity to begin using data analytics and machine learning (ML) to gain new product quality insights. Bring your laptops and your sense of discovery as Ken Johnston and Eun Change introduce analysis techniques and ML tools to help you develop new and potentially groundbreaking insights. First, they present a fast-paced statistics primer for those with no prior data exploration experience and...

You've been through some initial test automation training or bootstrapping, and now, a few months down the road, you find you’re spending a lot of time chasing intermittent test failures and maintaining your codebase. You're frustrated and losing trust in the automated tests. Sound familiar? Jim Holmes helps you find approaches that may save your sanity—all based on his years of experience and hard knocks. Beyond the test automation basics like waits, find logic, or basic page objects, Jim takes a dive into more advanced test automation approaches and methods—custom-designed APIs,...

Agile development and DevOps depend on an automated pipeline to build, test, and deploy code quickly. Security is all too often viewed as a manual task that is too difficult to automate and something to be left for later—not a good decision! Matt Grasberger says that, by leveraging automated security scans with open source scanners, you can reduce the risk of security vulnerabilities, get the most out of your pipeline, and increase software quality. Matt thoroughly explains and demonstrates several ways to implement automated security scans. Discover how to quickly test endpoints...

The past few years have brought a sea change in the way applications are architected, developed, and consumed—increasing both the complexity of testing and the risk of software failures. Given the trends that impact both architectures (cloud, microservices, and APIs) and processes (DevOps, agile, and continuous delivery), how can software testing keep pace with modern application delivery? Enter continuous testing. Wayne Ariola explores the three main differences between continuous testing and test automation. He explores why and where traditional test automation falls short in today’s...

Let’s face it—dogs are born to sniff everything. Using their noses, they gather information from other dogs, people, and most everything. We teach dogs to use their noses to find bombs, predict seizures, locate cancer cells, detect drugs, and so much more. When dogs smell, they are not just recording an odor; they get an entire story. Although testers have fewer scent receptors than dogs, Susan Zampino says that we can learn how to gather information like a dog to drive our exploratory testing. Using active audience participation, Susan will stimulate participants to rely on their...

API-based applications have become ubiquitous in the past few years. Yet many of us still really don't know what an API is from the inside out. Moreover, many of us don't know much about how to comprehensively test them! Join Paul Merrill to learn what everyone is doing and talking about related to APIs: microservices, REST, endpoints, requests, request methods, and responses. Paul demonstrates four free tools you can use to directly interact with a simple API: curl, the browser, Postman, and Java (with Rest Assured). Learn techniques for testing APIs at the service level and how to test...