Ask the Experts

Ask the Experts

• Differentiating between Functional and Nonfunctional Requirements

  Many of the difficulties encountered in defining requirements relate to the functional-nonfunctional distinction. As so often happens, some of those difficulties are things of which people are aware, largely realizing after-the-fact that ...  Continue Reading

• Where can software requirements vision-and-scope documents be found?

  Software requirement expert Robin Goldsmith discusses a vision-and-scope document example and other methods of determining project and requirements scope.  Continue Reading

• Test case preparation for a Web-based application

  Test case preparation is the setup work that prepares you to design and execute your tests. Learn what this preparation might entail for a Web-based app.  Continue Reading

• The difference between functional testing and regression testing

  Learn how regression testing differs from functional testing and user acceptance testing.  Continue Reading

• Writing a software requirements specification (SRS) for a portal app

  An SRS describes the requirements of a software product -- what it must do in order to function as expected. The standard format is identical regardless of the software's use.  Continue Reading

• What is system integration testing?

  What exactly is system integration testing? At what stage is it done? Do you need to prepare a separate integration test plan?  Continue Reading

• Is functional testing sufficient to determine code coverage?

  Functional testing, even with the addition of many types of input and user acceptance testing, is not the same as determining code coverage. Learn the difference between the two and why one does not replace the other.  Continue Reading

• Does Microsoft offer an international testing certification?

  Learn about international testing certification organizations and where to get more information on software testing and QA certs.  Continue Reading

• What is test granularity?

  Test granularity is the level of detail at which your software tests and test cases address your project.  Continue Reading

• What is test environment management?

  Test environment management is the process by which test machines (clients, servers, or both) are managed. Learn how to implement proper test environment management.  Continue Reading

• What type of designs are needed to write integration test cases?

  A user asks, "What type of design documents/designs (data flow, use case) exactly are required to write integration test cases?" Mike Kelly provides an approach to this question.  Continue Reading

• Who is responsible for integration testing, developer or tester?

  Responsibility for integration testing depends on the project and the company -- but ideally, the two roles will collaborate in this area.  Continue Reading

• How to become an expert in performance testing

  A beginner performance tester seeks advice on becoming an expert in the field.  Continue Reading

• Tools for performance testing a thick client using ODBC protocol

  What tools are available for performance testing on a thick client using ODBC? Are there any free open source tools?  Continue Reading

• Formulating test status reports based on daily status criteria

  A user requests help deriving the daily status criteria for the test execution of a software project, with status criteria including test execution criteria, test case failure rate and bug rate.  Continue Reading

• How to determine test coverage in a software project

  Determining test coverage is best served with three measurable categories (mapping requirements to test cases, test case status and code coverage analysis), plus a fourth subjective category.  Continue Reading

• Test coverage matrix vs. traceability matrix

  What is the difference between a test coverage matrix and a traceability matrix?  Continue Reading

• How to develop a checklist for unit, integration and system testing

  When taking IS development in-house, learn how to develop a checklist to make sure test environments are in place and people know what to do.  Continue Reading

• Is a requirements freeze in a software project a bad idea?

  Learn why imposing a requirements freeze in an application project is usually a misguided idea.  Continue Reading

• Designing test cases using Cause-Effect Graphing Technique

  The goal of cause-effect graphing is to reduce the number of test cases run. However, the time it takes to do such modeling limits its use in real-world situations.  Continue Reading

• How to conduct performance, stress, load testing without tools

  Rarely should you have to conduct performance, stress, and load testing without tools. If you do, here are six techniques to use.  Continue Reading

• Requirements elicitation: Workshops vs. apprentice-style analysis

  When eliciting requirements, workshops are one technique to consider, but you should also be open to other methods such as peer reviews and one-on-one interviews.  Continue Reading

• How testers can convince developers of software errors

  If a tester fully understands the software errors found and can show the impact of them, then he is more likely to get developers to fix them.  Continue Reading

• How to test an application's scalability, performance

  To determine if your application can scale, you want to look at performance testing factors such as response time, load, mean time to failure, and performance tuning.  Continue Reading

• Integration testing: Is it black box or white box testing?

  Integration testing of software systems can be black box or white box testing. Learn how each can be used in this Ask the Expert Q&A with testing expert Mike Kelly.  Continue Reading

• How to determine a software modeling technique

  Modeling can help you pull together the design of software. Expert Ken Willett explains this approach, as well as what to include in a software requirements specification.  Continue Reading

• How to prevent HTTP response splitting

  HTTP response splitting is a serious Web attack that can wreak havoc on your Web applications. Security expert Ramesh Nagappan explains how this attack works and what professionals can do to prevent this exploit.  Continue Reading

• Quality standards don't always mean fewer defects

  Are low defect rates more important than quality standards? Project management expert David Christiansen discusses when standards shouldn't be enforced and how managers can understand the distinction between quality standards and quality software.  Continue Reading

• Use cases and SRS for requirements gathering

  Before comparing use cases and software requirements specifications, you should know what each is. Requirements expert Robin Goldsmith explains how use cases and SRS work and how to use them for requirements engineering.  Continue Reading

• How to match the test environment to the production environment

  Testers often find a gulf between test results in a test environment and test results in a production environment. Testing expert John Overbaugh offers strategies for ensuring that test results in different environments match.  Continue Reading

• An approach to integration testing

  Integration testing can be thought of as the measurement of disagreements among parts of a system. Expert Mike Kelly explains how this approach to integration testing can be used.  Continue Reading

• Running UAT and system testing in parallel

  Conducting user acceptance testing and system testing at the same time may or may not be a good choice. Expert Baher Malek discusses the factors that testers need to consider when attempting a parallel UAT process.  Continue Reading

• How to present a project to the management

  Recommending a project to the boss requires confidence and a lot of forethought. Project management expert David Christiansen outlines what to do before approaching management and how to successfully propose a project.  Continue Reading

• How to test software with dynamic requirements

  Testers cannot assume that requirements will be well-defined and static. Testing expert Mike Kelly explains how to work with dynamic requirements to create responsive tests.  Continue Reading

• How to estimate change requests in requirements

  Software requirements are often subject to change; using a sound estimation process helps greatly to manage change. Requirements expert Betty Luedke explains, in detail, how to implement good estimation techniques.  Continue Reading

• Use cases: Who writes them, what data do you include?

  Typically a business analyst writes the use cases for a software project. But who writes them doesn't matter as much as what is included in them, says expert Robin Goldsmith.  Continue Reading

• Test metrics and use case coverage during testing

  When using use cases to drive testing, it's important to understand that there are no industry standards for coverage. Testing expert Mike Kelly explains how testers should approach dubious metrics.  Continue Reading

• How to learn white box testing

  Learning white box testing, also known as clear box or glass box testing, can be accomplished by following a series of steps. Testing expert Mike Kelly explains how to approach this learning process.  Continue Reading

• Project management charts: Beyond Gantt

  Project managers have many planning and organizational charts at their disposal. Gantt charts are only one example. PM expert David Christiansen outlines other charts PMs can use and how to get the most out of them.  Continue Reading

• Functional testing: Unit testing, integration testing and beyond

  Integration tests and unit tests both test the functionality of software, but they alone cannot replace functional testing. Expert Karen N. Johnson explains how integration and unit tests work and offers ideas for other functional tests.  Continue Reading

• Scrum and requirements gathering

  Scrum, an agile methodology, offers great advantages for certain software project teams. Expert Betty Luedke explains the basic tenets of Scrum and how they affect requirements engineering.  Continue Reading

• Requirements gathering with storyboards

  Requirements engineering techniques abound, and storyboards are a good option for some. Expert Betty Luedke explains how to gather requirements using the storyboard technique.  Continue Reading

• When to begin testing in the SDLC

  Testing is one of the most important components of the software development lifecycle, but when to begin testing depends on a number of factors. Expert Mike Kelly discusses how certain issues affect the timing of testing in the SDLC.  Continue Reading

• Building automated tests for legacy applications

  Automating tests for legacy applications has benefits but may not always be practical. Expert Karen N. Johnson discusses the advantages of manual testing versus automated testing for legacy apps.  Continue Reading

• Test cases from requirements specifications and use cases

  Software requirements specifications and use cases may both be used to create test cases. Expert Mike Kelly explains what testers should keep in mind when writing test cases with these sources.  Continue Reading

• Software testing in a virtual environment

  Performance testing your applications in a virtual environment introduces a number of challenges. Expert Mike Kelly explains what testers should anticipate when testing applications in a virtual environment.  Continue Reading

• The benefits of user acceptance testing

  User acceptance testing is an important part of the software development lifecycle. Expert Karen N. Johnson explains why UAT is beneficial for testers, users and virtually everyone involved in a software project.  Continue Reading

• The scope of user acceptance testing

  User acceptance testing is ineffective if testers don't allocate the proper time and resources. Expert Karen N. Johnson explains how to avoid shortchanging UAT.  Continue Reading

• How to elicit performance requirements

  Eliciting performance requirements from business end users necessitates a clearly defined scope and the right set of questions. Expert Mary Gorman explains how to effectively gather information.  Continue Reading

• Regression testing: How to select test cases

  Regression testing must cover certain conditions in order to be effective. Expert Karen N. Johnson explains how to write a thorough regression test script.  Continue Reading

• How to specialize in performance testing

  Performance testers need to have a strong set of skills, the right attitude and an aptitude for the subject. Expert Mike Kelly explains how to approach performance testing and other specialized testing fields.  Continue Reading

• Requirements discipline throughout the SDLC

  Requirements documentation varies throughout the software development life cycle. Expert Roxanne Miller explains how requirements activities and artifacts fit into the SDLC.  Continue Reading

• Testability requirements and verification work

  Testability and verifiability are a category of nonfunctional requirements. Expert Roxanne Miller explains how these concepts fit into software requirements engineering.  Continue Reading

• How to thoroughly test a website without automated tools

  Manual website testing is a challenge, but that doesn't mean it can't be thorough. Expert Karen N. Johnson explains how to test a high-functioning website without automated technology.  Continue Reading

• How to create reusable test materials

  Reusable test suites should only be created under the appropriate circumstances, cautions expert Karen N. Johnson. She explains how to work with the client's unique needs when creating reusable tests.  Continue Reading

• The difference between gap analysis and requirements analysis

  Requirements analysis and gap analysis are similar in name but not in practice. Expert Roxanne Miller explains how these processes work.  Continue Reading

• How to set up a test environment

  Software testing environments should be created according to the context of the software test. Expert Scott Barber offers his advice concerning test environments.  Continue Reading

• How to choose a software testing methodology

  Choosing the right testing methodology, be it agile, waterfall, V-model or spiral model, depends on the software project, explains expert John Overbaugh.  Continue Reading

• Granularity in test case design

  Test case granularity is a complex issue in test case design. Expert John Overbaugh explains how to determine how detailed your test cases should be.  Continue Reading

• Software requirements elicitation and documentation

  Eliciting software requirements from clients is more important than complete documentation. Expert Rob Apmann explains how to effectively gather requirements.  Continue Reading

• Prioritizing software testing on little time

  Too many test cases and too little time? Expert Scott Barber explains how to prioritize testing.  Continue Reading

• Requirements gathering for payroll application

  Engineering requirements for a payroll or similar application demands careful consideration. Expert Rob Apmann explains how to approach this complicated task.  Continue Reading

• Automated testing tools for a payment gateway

  Whether it is a Web service or a regular Web application, testing a payment gateway is far easier and more thorough when you know which tools to use. Expert Mike Kelly explains how to find the right testing tools.  Continue Reading

• Requirements gathering, SRS and use cases

  Requirements engineering is much more than writing an SRS or a few use cases. Expert Rob Apmann explains how to elucidate requirements and write effective use cases and software requirements specifications.  Continue Reading

• Usability testing vs. user acceptance testing

  Usability testing and user acceptance testing may sound similar, but these tests have different focuses and are executed at different times in the SDLC. Expert Karen N. Johnson explains how these tests work.  Continue Reading

• How to effectively elicit user interface requirements

  Requirements engineering should result in more than just a pretty user interface. Expert Mary Gorman explains how to gather comprehensive requirements.  Continue Reading

• Requirements and COTS software packages

  Understanding requirements is essential when buying a software package. Expert Mary Gorman explains how to shop for a COTS package and fit it to your needs.  Continue Reading

• Functional and nonfunctional requirements

  Requirements may be functional or nonfunctional and both are essential to a successful software project. Expert Roxanne Miller explains the differences between these types.  Continue Reading

• How to prevent anti-DNS pinning attacks

  Application security measures can prevent anti-DNS pinning, aka DNS rebinding. Expert Chris Wysopal explains how to protect end users from this attack.  Continue Reading

• How to make testing estimation more accurate

  Estimating the testing cycle is very difficult. Expert Karen N. Johnson offers advice to make estimation more accurate, in current and future projects.  Continue Reading

• How to communicate with the client for effective requirements engineering

  Requirements gathering must involve clear and frequent communication with the client in order ensure a good final product. Expert Rob Apmann explains how to engineer requirements that meet the client's needs.  Continue Reading

• Java application security features and measures

  Application security features are built in to the Java language. Expert Ramesh Nagappan explains how to take advantage of these features and several other simple measures to ensure Java application security.  Continue Reading

• Project management: How to compose a project team

  Building a software project team is no easy task. Expert David Christiansen explains how to pick the right people with the abilities and levels of experience to compose an effective team.  Continue Reading

• Software testing processes and development methodologies

  Testing phases and processes vary by development methodologies, but is there any best development methodology for your test plan? Expert Scott Barber offers his advice.  Continue Reading

• How to conduct smoke and sanity tests

  Regression testing is enhanced, not replaced, by smoke and sanity testing. Expert John Overbaugh explains what these tests are and how to effectively conduct them.  Continue Reading

• How to create a testing scorecard

  A software testing scorecard can be a good tool for managing a team's progress. Expert John Overbaugh explains how to create a testing scorecard and that fits yours and the customer's needs.  Continue Reading

• How to address security during requirements gathering

  Software security is crucial, and it takes some analysis to figure out what security requirements you should include. Expert Rob Apmann explains how to determine such requirements.  Continue Reading

• How to test a payment gateway on a Web application

  Testing a payment gateway is similar to testing other features; however, security testing plays an obviously important role. Expert John Overbaugh explains.  Continue Reading

• How to do integration testing

  The top-down and bottom-up approaches for integration testing are both critical. Expert John Overbaugh explains the differences between them and the reasons for their importance.  Continue Reading

• How to define a test strategy

  Having a test strategy can facilitate the testing process. Expert John Overbaugh explains how to define a test strategy and to what extent developers should be involved.  Continue Reading

• Software requirements gathering process models

  Requirements development process models and methodologies can be helpful when applied correctly. Expert Karl E. Wiegers explains which models are best and how to use them.  Continue Reading

• Automating user acceptance test cases

  Test automation is appropriate in certain situations, whether in user acceptance testing (UAT) or other test cases. Expert Karen N. Johnson explains how to gauge the usefulness of test automation for your project.  Continue Reading

• How to design test cases from use cases

  Use cases can be very helpful when designing test cases. Expert Mike Kelly explains how testers can mine use cases for information and which testing techniques are most effective.  Continue Reading

• How to test Web services

  Testing Web services requires some adjustment on the part of the tester. Expert Mike Kelly explains how to approach testing Web services and how it differs from testing other software.  Continue Reading

• How to structure a software requirements document

  Effective requirements documentation is essential for any good software project. Expert Karl E. Wiegers explains how to structure your software requirements documents.  Continue Reading

• SPML and SAML enhance application security in different ways

  Access control is a major application security issue and OASIS standards SPML and SAML provide authentication and authorization benefits. Expert Ramesh Nagappan explains how these standards work.  Continue Reading

• Agile development and software requirements documentation

  Agile development methods may have a different approach toward requirements documentation, but following agile doesn't preclude the need for good requirements documentation. Expert Karl E. Wiegers explains how to document requirements within the ...  Continue Reading

• Software assurance and risk management techniques

  Software assurance is essential for producing quality software, and risk management plays a big role. Expert Karen N. Johnson explains what these terms mean and how to incorporate them into your testing process.  Continue Reading

• Comprehensive software testing and complex algorithms

  Achieving test coverage often necessitates collaboration among groups that may not normally work with one another. Expert Mike Kelly explains how to test comprehensively under difficult circumstances.  Continue Reading

• Test plan and test strategy

  Software testing is helped by a good test plans, strategies and logistics. Expert Scott Barber explains what these aspects of the testing methodology are.  Continue Reading

• Software requirements specification and IEEE standards

  What does the IEEE outline for requirements specifications, and how strictly should you abide by that standard? Expert Karl E. Wiegers digs into the details of an SRS.  Continue Reading

• Authentication and authorization for Web applications

  Web applications need robust authentication and authorization mechanisms. Expert Ramesh Nagappan explains what measures are needed before you deploy Web apps.  Continue Reading

• Performance testing in the production environment

  Performance testing should be executed in the production environment in order to garner accurate results whenever possible. Expert Karen N. Johnson explains how.  Continue Reading

• Software metrics and the SDLC

  Proper measurement of software metrics is essential to an effective software development life cycle. Expert Bas de Baar explains how to approach software metrics in your SDLC.  Continue Reading

• How to implement security in Java EE and Java ME

  Web application security in Java EE and Java ME is aided by security architectures inherent in each platform. Expert Ramesh Nagappan explains how to understand these architectures and use them to achieve Java security.  Continue Reading

• Guidelines for handling changes in software requirements

  Software requirements are subject to change. Expert Karl E. Wiegers explains how to understand the causes of these fluctuations and how to handle them.  Continue Reading

• Secure Java applets, Java Web Start and Java Server Faces

  With rich clients coming back, developers are looking into Java applets, Java Server Faces and Java Web Start. Expert Ramesh Nagappan discusses security for applets, JSF and JWS.  Continue Reading

• Using Six Sigma for software project management

  How do you effectively use Six Sigma in software project management? Expert Bas de Baar explains when -- and when not -- to espouse this management philosophy.  Continue Reading

• The value of documenting test case results

  Expected and actual results of test cases should be documented for a number of reasons. Software testing expert Karen N. Johnson details the benefits.  Continue Reading

• Understanding performance, load and stress testing

  Performance, load and stress testing have different goals and different methods. Software testing expert Scott Barber explains what these tests are and how they should be approached.  Continue Reading