Conference Presentations

Practical Threat Modeling: Engaging Testers Early

Threat modeling is one of the most important activities that development and test teams should perform as part of a security development lifecycle. Although threat modeling is not always easy to get going for a team that has little or no security experience, it can be critical to your products and your project. Edward Bonver explores the process behind modeling threats to systems and demonstrates resulting models. He explains how the process has been successfully implemented and followed across Symantec, where development teams and environments vary dramatically across hundreds of products. Learn how the Symantec development and test teams build a comprehensive security profile of the software, providing a guide for secure development as well as the testing focus and strategy.

Edward Bonver, Symantec Corporation
Mobile Testing: Old Wine in a New Bottle?

In the enterprise, mobile adoption is increasing at a fast pace-and so are the concerns about security, reliability, and quality for the software that drives mobile devices. Some of the unique and unfamiliar challenges faced while testing mobile applications are usability, network connectivity, online/offline content, call interruptions, varying form factors, networks, and device providers. Manish Mathuria describes how mobile testing differs from testing traditional enterprise systems. He provides practical tips on how to quickly and smoothly transition from traditional software testing to mobile testing while striving to deliver the same level of quality. Manish explores the nascent mobile testing tools available today to test enterprise mobile applications that are quickly reaching the same complexity as their desktop counterparts.

Manish Mathuria, InfoStretch Corporation
Be the Tester Your Dog Thinks You Are

Most of us grew up wanting to be firemen or astronauts or teachers-not testers. Eric Jacobson, an average guy and not incredibly technical, loves software testing and his career in testing as much as his dog loves him. Using videos and candid photos of his test team at work, Eric shares the top ten skills and practices he’s developed and honed over the years to make himself a test leader. He explains how he helps his team establish reasonable goals and then meet them. Find out why testing broadly first and deeper later keeps the programmer busy and takes some of the guesswork out of test estimation. Watch Eric as he shows you how to use white boarding to explore technical systems and help programmers find their own mistakes. Take back to work ten ideas you can employ immediately to help you be the tester your dog thinks you are.

Eric Jacobson, Turner Broadcasting System, Inc.
STARWEST 2011: Test Process Improvement on a Shoestring

In most organizations cost reduction is still the number one motivation for test process improvement. Although several formal improvement models are popular, they require formal assessments, process change working groups, extensive implementation programs, and new organizational structures. Instead, you can quickly implement measures that improve your testing process incrementally within your day-to-day activities. Martin Pol presents a low-budget way to select and implement a set of measures that can rapidly improve testing’s contribution to your project’s success-simple risk analysis, proactive test design, coverage targeting, and novel ways to reuse tools, environments, expertise, and existing testware. Learn how low-budget test process improvement can become a natural behavior for your testing staff. Achieve quick wins by working more closely with development and using what you have-instead of buying or creating new tools.

Martin Pol, Polteq Test Services B.V.
Risk-based Testing: When You Can't Test It All

Testers everywhere have experienced this scenario-the development cycle slips and now testing gets two weeks instead of four to complete its work. How do you systematically determine what to test and what not to test in this time-constrained situation? How do you determine the right amount of testing so that you are not doing too much or too little? Reán Young shows how using a risk-based approach helps to identify test strategy options based on a combination of business and technical factors. They evaluate risks in each area of the application and devise a test plan that ensures that the most critical components will be tested before the deadline. This approach encourages the entire project team to take ownership of determining what should be tested.

Rean Young, Kroger Company
Establishing a Testing Center of Excellence: The Pros and Cons

Many testing organizations view implementing a Testing Center of Excellence (TCoE) as a positive step toward providing better service to their clients. They understand how a TCoE can define and promote standard testing practices, consolidate testing tools, reduce costs, define testing boundaries, and provide specialized testing services. Unfortunately, many organizations, as they work to establish their TCoE, face problems and don’t achieve the promised benefits. Raja Neravati explores approaches for overcoming the challenges of implementing a TCoE. He describes a “tested” TCoE implementation process to address business goals, stakeholder interests, span of control, budgets, and quality problems.

Raja Neravati, AppLabs
Testing on the Toilet: A Success Story from STARWEST 2007

As testers, we often need to inform and educate our colleagues about the fundamentals of testing. The challenge is not just to get their attention for five minutes; the goal is to continually reinforce the benefit and techniques for testing. In their STARWEST 2007 Keynote, Googlers Bharat Mediratta and Antoine Picard introduced the idea of “Testing on the Toilet”-a testing newsletter posted in toilets throughout Google’s development campus. In this story of implementing a great idea in your company, Mette Bruhn-Pedersen describes how she adapted this idea to spread the testing message in her organization. Instead of using a testing newsletter, Mette created a “Testing on the Toilet” quiz consisting of questions based on the ISTQB foundation syllabus on the fundamentals of testing. Learn how to customize this approach to your organization and discover how to create your own, unique testing message.

Mette Bruhn-Pedersen, Bruhn-Pedersen Consulting
Hardware Bound: Testing with Limited Access to Resources

If you are challenged to test software applications with limited or no access to the hardware on which they operate in production, this session is for you. Gatan’s DigitalMicrograph software, the industry standard for use on electron microscopes controlling proprietary cameras and imaging filters, is highly specialized software requiring expensive hardware equipment for testing. This equipment must be shared by many individuals and organizations-including test. Even Gatan, the manufacturer of this equipment, often does not have all the hardware available in-house to test software revisions. Scott Miles shares his experience living with limited access to hardware and the approaches he has used to strengthen their test strategies. Join in the discussion and take back examples of how to build relationships with your manufacturing facility, OEM suppliers, and customers to leverage their hardware and resources for everyone’s benefit.

Scott Miles, Gatan Inc.
Model-based Testing: The Next Generation

Spotify is a music streaming service offering high-quality, instant access to music from a range of major and independent record labels. Model-based testing (MBT) is an important test technique they use to ensure that their systems deliver quality service. Spotify has discovered new ways to use MBT for effective testing in support of its more than ten-million user base. Alexander Andelkovic shares the challenges of implementing and integrating new MBT solutions and convincing company management that MBT is both efficient and effective. Explore the choice they made between buying or building an advanced MBT tool, the benefits of using MBT in new ways, and the increased visibility from improved quality. Whether your organization employs automated testing or not, Alexander shows you how to successfully integrate advanced MBT techniques with traditional test methods.

Alexander Andelkovic, Spotify
Crowdsourced Testing: An Emerging Model for Serious Testing

Crowdsourcing has emerged as a startlingly effective by-product of social networking and the web. Manoj Narayanan describes the many ways businesses are using crowdsourcing as a cost and quality lever in their most important software testing projects. Learn about crowdsourcing and how the value delivered can differ when testing a web application, mobile device, gaming app, or other types of systems. Manoj compares the business model practiced by organizations such as uTest to traditional testing practices. He examines the different approaches that organizations are taking today to integrate crowdtesting into the overall testing strategy, ranging from adopting crowd testing for ad hoc releases to incorporating it as an integral part of the overall testing strategy.

Manoj Narayanan, Cognizant Technology Solutions

Pages

AgileConnection is a TechWell community.

Through conferences, training, consulting, and online resources, TechWell helps you develop and deliver great software every day.