Better Software Magazine Articles

Cover or Discover?

Excellent testing isn't just about covering the "map"–it's also about exploring the territory, which is the process by which we discover things that the map doesn't cover.

Michael Bolton's picture Michael Bolton
Unit vs. System Testing-It's OK to be Different

There are two distinct roles in many software projects that are involved with testing: developers and testers. Should they take the same approach to testing, or are there some principles that apply to only one of the roles? What should they do to coordinate their work? Danny Faught went through an exercise to compare and contrast and found that the questions he couldn't answer were as interesting as the questions he could answers.

Danny R. Faught's picture Danny R. Faught
The Tester Who Came In from the Cold

Traditionally, relationships between testing and coding teams often bordered on frosty. But the wall has started to come down, especially in organizations that have embraced agile principles, values, and practices.

Lisa Crispin's picture Lisa Crispin
The One-Hour Regression Test

If a customer asked you to demonstrate to him, within an hour, that your newest software is ready for use, what tests would you run? Are these the same tests that you are now performing in your first hour of regression testing? They should be.

Steven Woody's picture Steven Woody
Got You Covered

Excellent testing starts by questioning the mission. So, the first step when we are seeking to evaluate or enhance the quality of our test coverage is to determine for whom or what we're determining coverage.

Michael Bolton's picture Michael Bolton
Scenario-Based Software Architecture Reviews: A Quality Process

Quality attributes--performance, scalability, availability, maintainability, etc.-are often referred to as the non-functional requirements. Unfortunately, these critical factors often are specified through vague platitudes rather than explicit statements. Participatory, scenario-based architecture reviews are essential to determine if the architecture meets the system's quality attributes as well as the functional requirements. Scenario-based architecture reviews rigorously examine the characteristics of the system to determine strengths, limitations, operating bounds, and overall requirements satisfaction. Results include the impact on and risk of architectural choices for the system. Kevin Bodie details the architecture review planning process, illustrates its execution, and shows you the results with specific deliverables-the Architecture Readout Presentation and Executive Architecture Readout.

Kevin Bodie, Pitney Bowes Inc
The Challenges of SOA Security

Service Oriented Architecture (SOA) has many security challenges. To address these challenges, it is not enough to set up a secure operational infrastructure. SOA security must be implemented in all key areas of software development-architecture, design, platform, governance, requirements, development, and testing. Jimmy Xu discusses today's SOA security challenges and explains why it is important to address these challenges inside software development. He presents the latest security practices: standards compliance; review of architectural blueprints and SOA platforms; secure SDLC process; threat modeling; secure coding; and security testing. This session not only prepares you to delve into the details of SOA security methodology, process, and techniques, but also gives you the background information you need to plan and scope security assurance activities in your SOA development projects

Jimmy Xu, CGI Inc.
SOA Testing Challenges and Proven Practices

The best thing about Service Oriented Architecture (SOA) is its flexibility-a heterogeneous computing environment in which different services and service providers can use different technologies; loose coupling of components to allow any application to make use of service capabilities; and ad-hoc integration of applications within and across organizations. However, from a tester's perspective, these very advantages make the testing of Web services and SOA-based applications highly complex. Testing Web services through the front-end of applications is usually ineffective. Tracking defects to their source is difficult because of the layered application designs. Instead, you must design and execute mostly non-functional tests for compliance to standards, interoperability, security, reliability, and performance.

Guruprasad Gopalakrishnan, Wipro Technologies
SOX and HIPPA and RESPA, Oh My! Mastering Software Compliance

Determining whether legal and contractual issues apply to your development efforts isn't always simple. There may be some obvious factors-industry regulations, service level agreements (SLAs), and state or federal agency oversight. However, other factors may not be so obvious. Even today, the Sarbanes-Oxley Act is largely legally untested, subjecting your company to unknown legal risks. Examining legal, compliance, and audit issues throughout the QA process lifecycle, Elle Ringham discusses the right questions to ask and what to do with the answers. She provides guidelines you need to work with stakeholders, developers, attorneys, and auditors. Incorporate legal requirements and compliance issues as part of the architecture, development process, and for all strategic business initiatives.

Elle Ringham, Cognizant
A Toolkit for Assessing SOA Readiness

Before charging "full speed ahead" into the land of service-oriented architecture (SOA), you need help to ensure success and mitigate the risks inherent in such major systems changes. Jerry Smith provides proven tools for assessing SOA readiness and outlines the essential steps to implementing SOA. Jerry presents reference SOA architectures that demonstrate solid standards and specifications to compare with your implementation plans. He introduces an SOA Maturity Model to help you understand your current organizational and technological state. The SOA Maturity Model is a communications tool that outlines how the organization’s SOA implementation will evolve along both business and technical lines. Jerry outlines the various stages the model entails and how to apply it so that technical and organizational changes are easily coordinated across the enterprise.

Jerry Smith, Symphony Services

Pages

AgileConnection is a TechWell community.

Through conferences, training, consulting, and online resources, TechWell helps you develop and deliver great software every day.