Ask the Experts

Ask the Experts

• Running UAT and system testing in parallel

  Conducting user acceptance testing and system testing at the same time may or may not be a good choice. Expert Baher Malek discusses the factors that testers need to consider when attempting a parallel UAT process.  Continue Reading

• How to present a project to the management

  Recommending a project to the boss requires confidence and a lot of forethought. Project management expert David Christiansen outlines what to do before approaching management and how to successfully propose a project.  Continue Reading

• How to test software with dynamic requirements

  Testers cannot assume that requirements will be well-defined and static. Testing expert Mike Kelly explains how to work with dynamic requirements to create responsive tests.  Continue Reading

• How to estimate change requests in requirements

  Software requirements are often subject to change; using a sound estimation process helps greatly to manage change. Requirements expert Betty Luedke explains, in detail, how to implement good estimation techniques.  Continue Reading

• Use cases: Who writes them, what data do you include?

  Typically a business analyst writes the use cases for a software project. But who writes them doesn't matter as much as what is included in them, says expert Robin Goldsmith.  Continue Reading

• Test metrics and use case coverage during testing

  When using use cases to drive testing, it's important to understand that there are no industry standards for coverage. Testing expert Mike Kelly explains how testers should approach dubious metrics.  Continue Reading

• Functional testing: Unit testing, integration testing and beyond

  Integration tests and unit tests both test the functionality of software, but they alone cannot replace functional testing. Expert Karen N. Johnson explains how integration and unit tests work and offers ideas for other functional tests.  Continue Reading

• Requirements gathering with storyboards

  Requirements engineering techniques abound, and storyboards are a good option for some. Expert Betty Luedke explains how to gather requirements using the storyboard technique.  Continue Reading

• Scrum and requirements gathering

  Scrum, an agile methodology, offers great advantages for certain software project teams. Expert Betty Luedke explains the basic tenets of Scrum and how they affect requirements engineering.  Continue Reading

• When to begin testing in the SDLC

  Testing is one of the most important components of the software development lifecycle, but when to begin testing depends on a number of factors. Expert Mike Kelly discusses how certain issues affect the timing of testing in the SDLC.  Continue Reading

• Building automated tests for legacy applications

  Automating tests for legacy applications has benefits but may not always be practical. Expert Karen N. Johnson discusses the advantages of manual testing versus automated testing for legacy apps.  Continue Reading

• Test cases from requirements specifications and use cases

  Software requirements specifications and use cases may both be used to create test cases. Expert Mike Kelly explains what testers should keep in mind when writing test cases with these sources.  Continue Reading

• Software testing in a virtual environment

  Performance testing your applications in a virtual environment introduces a number of challenges. Expert Mike Kelly explains what testers should anticipate when testing applications in a virtual environment.  Continue Reading

• The benefits of user acceptance testing

  User acceptance testing is an important part of the software development lifecycle. Expert Karen N. Johnson explains why UAT is beneficial for testers, users and virtually everyone involved in a software project.  Continue Reading

• The scope of user acceptance testing

  User acceptance testing is ineffective if testers don't allocate the proper time and resources. Expert Karen N. Johnson explains how to avoid shortchanging UAT.  Continue Reading

• Regression testing: How to select test cases

  Regression testing must cover certain conditions in order to be effective. Expert Karen N. Johnson explains how to write a thorough regression test script.  Continue Reading

• How to specialize in performance testing

  Performance testers need to have a strong set of skills, the right attitude and an aptitude for the subject. Expert Mike Kelly explains how to approach performance testing and other specialized testing fields.  Continue Reading

• Requirements discipline throughout the SDLC

  Requirements documentation varies throughout the software development life cycle. Expert Roxanne Miller explains how requirements activities and artifacts fit into the SDLC.  Continue Reading

• Testability requirements and verification work

  Testability and verifiability are a category of nonfunctional requirements. Expert Roxanne Miller explains how these concepts fit into software requirements engineering.  Continue Reading

• How to thoroughly test a website without automated tools

  Manual website testing is a challenge, but that doesn't mean it can't be thorough. Expert Karen N. Johnson explains how to test a high-functioning website without automated technology.  Continue Reading

• How to create reusable test materials

  Reusable test suites should only be created under the appropriate circumstances, cautions expert Karen N. Johnson. She explains how to work with the client's unique needs when creating reusable tests.  Continue Reading

• The difference between gap analysis and requirements analysis

  Requirements analysis and gap analysis are similar in name but not in practice. Expert Roxanne Miller explains how these processes work.  Continue Reading

• How to set up a test environment

  Software testing environments should be created according to the context of the software test. Expert Scott Barber offers his advice concerning test environments.  Continue Reading

• How to choose a software testing methodology

  Choosing the right testing methodology, be it agile, waterfall, V-model or spiral model, depends on the software project, explains expert John Overbaugh.  Continue Reading

• Granularity in test case design

  Test case granularity is a complex issue in test case design. Expert John Overbaugh explains how to determine how detailed your test cases should be.  Continue Reading

• Prioritizing software testing on little time

  Too many test cases and too little time? Expert Scott Barber explains how to prioritize testing.  Continue Reading

• Requirements gathering for payroll application

  Engineering requirements for a payroll or similar application demands careful consideration. Expert Rob Apmann explains how to approach this complicated task.  Continue Reading

• Automated testing tools for a payment gateway

  Whether it is a Web service or a regular Web application, testing a payment gateway is far easier and more thorough when you know which tools to use. Expert Mike Kelly explains how to find the right testing tools.  Continue Reading

• Requirements gathering, SRS and use cases

  Requirements engineering is much more than writing an SRS or a few use cases. Expert Rob Apmann explains how to elucidate requirements and write effective use cases and software requirements specifications.  Continue Reading

• Usability testing vs. user acceptance testing

  Usability testing and user acceptance testing may sound similar, but these tests have different focuses and are executed at different times in the SDLC. Expert Karen N. Johnson explains how these tests work.  Continue Reading

• How to effectively elicit user interface requirements

  Requirements engineering should result in more than just a pretty user interface. Expert Mary Gorman explains how to gather comprehensive requirements.  Continue Reading

• Requirements and COTS software packages

  Understanding requirements is essential when buying a software package. Expert Mary Gorman explains how to shop for a COTS package and fit it to your needs.  Continue Reading

• How to prevent anti-DNS pinning attacks

  Application security measures can prevent anti-DNS pinning, aka DNS rebinding. Expert Chris Wysopal explains how to protect end users from this attack.  Continue Reading

• How to communicate with the client for effective requirements engineering

  Requirements gathering must involve clear and frequent communication with the client in order ensure a good final product. Expert Rob Apmann explains how to engineer requirements that meet the client's needs.  Continue Reading

• Java application security features and measures

  Application security features are built in to the Java language. Expert Ramesh Nagappan explains how to take advantage of these features and several other simple measures to ensure Java application security.  Continue Reading

• Project management: How to compose a project team

  Building a software project team is no easy task. Expert David Christiansen explains how to pick the right people with the abilities and levels of experience to compose an effective team.  Continue Reading

• Software testing processes and development methodologies

  Testing phases and processes vary by development methodologies, but is there any best development methodology for your test plan? Expert Scott Barber offers his advice.  Continue Reading

• How to create a testing scorecard

  A software testing scorecard can be a good tool for managing a team's progress. Expert John Overbaugh explains how to create a testing scorecard and that fits yours and the customer's needs.  Continue Reading

• How to address security during requirements gathering

  Software security is crucial, and it takes some analysis to figure out what security requirements you should include. Expert Rob Apmann explains how to determine such requirements.  Continue Reading

• How to do integration testing

  The top-down and bottom-up approaches for integration testing are both critical. Expert John Overbaugh explains the differences between them and the reasons for their importance.  Continue Reading

• How to define a test strategy

  Having a test strategy can facilitate the testing process. Expert John Overbaugh explains how to define a test strategy and to what extent developers should be involved.  Continue Reading

• How to test a payment gateway on a Web application

  Testing a payment gateway is similar to testing other features; however, security testing plays an obviously important role. Expert John Overbaugh explains.  Continue Reading

• Software requirements gathering process models

  Requirements development process models and methodologies can be helpful when applied correctly. Expert Karl E. Wiegers explains which models are best and how to use them.  Continue Reading

• How to design test cases from use cases

  Use cases can be very helpful when designing test cases. Expert Mike Kelly explains how testers can mine use cases for information and which testing techniques are most effective.  Continue Reading

• How to structure a software requirements document

  Effective requirements documentation is essential for any good software project. Expert Karl E. Wiegers explains how to structure your software requirements documents.  Continue Reading

• SPML and SAML enhance application security in different ways

  Access control is a major application security issue and OASIS standards SPML and SAML provide authentication and authorization benefits. Expert Ramesh Nagappan explains how these standards work.  Continue Reading

• Agile development and software requirements documentation

  Agile development methods may have a different approach toward requirements documentation, but following agile doesn't preclude the need for good requirements documentation. Expert Karl E. Wiegers explains how to document requirements within the ...  Continue Reading

• Software assurance and risk management techniques

  Software assurance is essential for producing quality software, and risk management plays a big role. Expert Karen N. Johnson explains what these terms mean and how to incorporate them into your testing process.  Continue Reading

• Comprehensive software testing and complex algorithms

  Achieving test coverage often necessitates collaboration among groups that may not normally work with one another. Expert Mike Kelly explains how to test comprehensively under difficult circumstances.  Continue Reading

• Test plan and test strategy

  Software testing is helped by a good test plans, strategies and logistics. Expert Scott Barber explains what these aspects of the testing methodology are.  Continue Reading

• Software requirements specification and IEEE standards

  What does the IEEE outline for requirements specifications, and how strictly should you abide by that standard? Expert Karl E. Wiegers digs into the details of an SRS.  Continue Reading

• Authentication and authorization for Web applications

  Web applications need robust authentication and authorization mechanisms. Expert Ramesh Nagappan explains what measures are needed before you deploy Web apps.  Continue Reading

• Performance testing in the production environment

  Performance testing should be executed in the production environment in order to garner accurate results whenever possible. Expert Karen N. Johnson explains how.  Continue Reading

• Software metrics and the SDLC

  Proper measurement of software metrics is essential to an effective software development life cycle. Expert Bas de Baar explains how to approach software metrics in your SDLC.  Continue Reading

• How to implement security in Java EE and Java ME

  Web application security in Java EE and Java ME is aided by security architectures inherent in each platform. Expert Ramesh Nagappan explains how to understand these architectures and use them to achieve Java security.  Continue Reading

• Guidelines for handling changes in software requirements

  Software requirements are subject to change. Expert Karl E. Wiegers explains how to understand the causes of these fluctuations and how to handle them.  Continue Reading

• Using Six Sigma for software project management

  How do you effectively use Six Sigma in software project management? Expert Bas de Baar explains when -- and when not -- to espouse this management philosophy.  Continue Reading

• The value of documenting test case results

  Expected and actual results of test cases should be documented for a number of reasons. Software testing expert Karen N. Johnson details the benefits.  Continue Reading

• Understanding performance, load and stress testing

  Performance, load and stress testing have different goals and different methods. Software testing expert Scott Barber explains what these tests are and how they should be approached.  Continue Reading

• Meeting use case preconditions and postconditions

  Writing software requirements that satisfy use case pre- and postconditions can be achieved a number of ways. Expert Karl E. Wiegers explains how.  Continue Reading

• Estimating project costs, writing project reports

  Estimating the cost of a software development project and writing a suitable project report are not necessarily difficult tasks. Bas de Baar breaks down project reporting and cost estimation for beginners.  Continue Reading

• Use cases, scenarios and user goals

  A use case includes many scenarios. When dividing use cases, it's important to understand scenarios and use case flows with respect to user goals, explains expert Karl E. Wiegers.  Continue Reading

• Rewarding team members for outstanding work

  Recognizing or rewarding team members for jobs well done helps build morale. Your sincere appreciation can go a long way, says project management expert David Christiansen.  Continue Reading

• How to design test cases

  Test case design varies according to the tester and situation. Expert Karen N. Johnson offers thorough, practical advice for designing test cases.  Continue Reading

• Clarifying software requirements

  Software requirements engineering is impeded by unclear, indeterminate requirements. Expert Karl E. Wiegers explains how analysts can clarify requirements with users.  Continue Reading

• Software requirements specification templates

  A software requirements specification is a comprehensive document that aids in the software development process. Expert Karl E. Wiegers explains how to use templates when creating a software requirements specification.  Continue Reading

• User acceptance testing and test cases

  User acceptance testing is essential to creating quality software. Expert Scott Barber discusses how to implement user acceptance testing and the role of test cases.  Continue Reading

• Skills for entry-level software testers

  You want to become a software tester, but you aren't a programmer. What skills should you have? Testing expert Scott Barber has some advice.  Continue Reading

• What to do when the test environment doesn't match production

  There's no way to extrapolate performance results from a test environment to predict production performance. But software testing expert Scott Barber says there are other testing techniques you can employ to ensure high performance in production ...  Continue Reading

• How important is requirements traceability?

  Requirements tracing can prevent you from overlooking a planned requirement during implementation. However, requirements must be written carefully, expert Karl Wiegers says.  Continue Reading

• Enabling HTTPS in J2EE Web components

  HTTPS protocol is a valuable security feature for J2EE Web components. Expert Ramesh Nagappan explains how to implement HTTPS in JSPs and servlets.  Continue Reading

• Sorting out black box, white box and gray box software testing methods

  Black box, white box and gray box software testing methods may seem confusing. Expert Brad Arkin describes how these software testing methods work.  Continue Reading

• Obfuscation may prevent reverse engineering

  Reverse engineering can reveal all of the source code in your .NET applications. Expert Dan Cornell recommends code obfuscation as a protective measure.  Continue Reading

• Understanding XPath injection

  XPath injection is similar to SQL injection and other injection attacks, but this XML exploit has its own unique set of issues. Web services expert Rami Jaamour details how these exploits work -- and how you can avoid them.  Continue Reading

• Obfuscation tools and application security

  Obfuscator tools are quite different from other application security tools. Expert Brad Arkin lays out the basics of code obfuscation.  Continue Reading

• XSS prevention in Java

  Cross-site scripting exploits can devastate Java apps. With XSS attacks on the rise, expert Ramesh Nagappan explains how to prevent these exploits in J2EE applications through proper input validation and other methods.  Continue Reading

• Creating a secure login page with Java

  Strong authentication and session security are the foundation of a secure Java login page. Expert Ramesh Nagappan explores the security technology and best practices behind robust login sites.  Continue Reading

• Limiting user access in ASP.NET

  Protecting privileged directories in ASP.NET requires strong authorization methods. Expert Dan Cornell breaks down the best techniques for access control in .NET 2.0 applications.  Continue Reading

• Cookie poisoning prevention in ASP.NET

  ASP.NET applications are vulnerable to cookie poisoning, and guarding against this attack is a multistep process. Expert Dan Cornell explains how to protect your apps from exploit.  Continue Reading

• Using fuzzer tools to find vulnerabilities

  Fuzzers are excellent tools for finding vulnerabilities in your software. They can be used legitimately by a developer or maliciously by a hacker. Expert Brad Arkin explains how to use fuzzers in order to enhance security.  Continue Reading

• How does WS-Security relate to other WS- standards?

  WS-Security, WS-Reliability, WS-Trust, WS-SecurityPolicy and other standards can be combined in various ways. Web services expert Rami Jaamour explains what these standards are and how they interrelate.  Continue Reading

• Understanding and preventing integer overflows

  Integer overflow exploits can completely take over your programs. Expert Jeff Williams explains the vulnerabilities that leave you open to these types of attacks.  Continue Reading

• Manual vs. automated penetration testing

  Manual penetration testing, automated pen testing or both? Application tools and technologies expert Brad Arkin helps you sort through your application security options.  Continue Reading

• How to create a secure login page using ASP.NET

  A secure ASP.NET login page is easier to create than one might assume. Expert Dan Cornell explains how to use authentication and authorization to ensure your login page is safe.  Continue Reading

• Can you prevent SQL injection attacks with stored procedures?

  Can SQL injection attacks be prevented by using stored procedures? Unfortunately, no, says application security expert Dan Cornell.  Continue Reading

• XML security: Preventing XML bombs

  With the use of Web services, XML security becomes increasingly important. Web services expert Rami Jaamour explains the damage an XML bomb can do and how to protect against it.  Continue Reading

• When to use WS-Security and SSL

  When should you use WS-Security and when should you SSL? Web services security expert Alex Smolen advises.  Continue Reading