Security QA testing is still in its infancy, yet the number of vulnerabilities found in applications is increasing-up by 75 percent in 2001 according to Gartner Group. Although software teams are learning about the types of coding and configuration errors that expose vulnerabilities in an application, a comprehensive QA methodology must be applied to reduce security risk. This means testers need a security policy that can serve as the basis for automated tests. Security experts can define these policies, but testers need to know how to effectively run the security tests in an automated environment to locate vulnerabilities, evaluate their results, and enter bugs for failed tests in a defect tracking system. By automating security tests, organizations can significantly reduce risk and maximize existing resource productivity.

• Reduce the cost of development by finding security holes early in the cycle, before release

The success of your test automation efforts often depends not only on you and your team, but on your management as well. The number one complaint from test automation teams is that they don't have management support for their test efforts. But what can you do to get through to them? Communicating with management on their terms will go a long way towards making your case. By putting yourself in their frame of mind, you can speak on their terms, thereby increasing the likelihood your message will be understood. This session illustrates how you can objectively show facts and data that support your business case. The instructor also covers business tools and metrics.

• Find out what works and what doesn't when it comes to "getting through" to management
• Learn how to make a business case and use metrics like ROI to show results

Most companies organize their application development teams in a manner that reduces communication. However, the end result of this is that the application is released with more defects and on a delayed schedule. Total reliability management is a new approach to ensuring product quality and timely release. This presentation focuses on how quality assurance can be applied to each phase of the software development and deployment processes. Attend and learn how total reliability management can be achieved, and how your organization can benefit from it.

• Learn why reliability can't be put in "after the fact"
• See how production monitoring can provide extremely valuable information
• Bridge the information gap so development teams can get valuable information from the QA and production teams

Achieving high levels of availability and scalability for large server environments is a challenge that impacts all aspects of application design, development, testing, deployment, and operations. In this presentation, Nancy Landau provides a real-world case study of a successful implementation of a multi-layered enterprise system that supports 600-plus servers in multiple sites. You'll see how a wide assortment of monitoring tools were integrated together to assess the health of server farms, the individual components within the environments, and the applications themselves. Learn how test engineers and operations staff work together to improve performance and reliability.

• Discover how the team overcame process and tool challenges
• Dissect the case study to determine what led to the project's success