Tips

Tips

• Beyond burndowns: Metrics for enterprise Agile

  Executive management and stakeholders want to know the status of a project and this is traditionally done with metrics. But as our approach to software development changes, so do our measurements. In this tip, find out which metrics consultant ...  Continue Reading

• Regression vs. risk-based testing: Managing complexity

  In this tip, consultant Vasudeva Naidu describes in detail the steps necessary to implement risk-based testing in your organization to ensure your regression test strategy is solid and successful.  Continue Reading

• Cloud computing ushers in a new era for DevOps: NoOps

  The adoption of cloud computing services means changes to the way development and operations work together. Forrester dubs the term NoOps.  Continue Reading

• Cloud testing: The cloud and your testing practice

  How is testing affected when working in the cloud? In this tip, consultant David W. Johnson describes three areas in which the cloud is used in your testing practice: as a testing enabler, for non-functional testing and for functional testing.  Continue Reading

• CIOs and software quality assurance: Five hurdles for QA managers

  Director of QA and instructor John Scarpino has provided tips for overcoming five hurdles associated with CIO expectations.  Continue Reading

• Automated change management in Agile development

  Software consultant Nari Kannan offers a number of ways that change management can be automated in Agile software development.  Continue Reading

• The motivation behind continuous integration in embedded software development

  This tip, the first of a two-part series, speaks to the role that continuous integration plays to help you create better releases and reduce the workload in embedded software development.  Continue Reading

• Embedded software quality: To simulate, or emulate? That is the question

  Understanding the differences between simulator and emulator embedded software development tools is critical to effectively using them. This article dives into the issue and provides some suggestions to follow.  Continue Reading

• Agile development for embedded software: The fallacy of one size fits all

  In this tip, Agile consultant Howard Deiner describes how Agile software development can and should be done with the iteration cycles using emulators or virtualized hardware so that the benefits of Agile will still be obtained, regardless of the ...  Continue Reading

• STAREAST: Agile testing and defect tracking

  Defect tracking systems (DTS's) are often used in application lifecycle management (ALM) to keep track of the bugs found during software development. In this tip, Agile expert Lisa Crispin talks about the pros and cons of using a DTS and ...  Continue Reading

• Managing change requests to your application

  In this tip, we look at end user requests, and the process to prioritize the requests for IT, so they know where to focus their work efforts.  Continue Reading

• Application security: Protecting application availability, data confidentiality and integrity

  Network security and application security are both important in keeping your applications safe from hackers. In this tip, security engineer John Overbaugh focuses on application security, which is needed to protect the confidentiality, availability ...  Continue Reading

• Getting on the same page: How testers can help clarify requirements

  Gathering accurate requirements is one of the biggest challenges of software development. There can be a big disconnect between what the users want and the software that gets developed. In this tip, Agile expert Lisa Crispin gives some helpful ...  Continue Reading

• Requirements tips for data-centric projects

  Gathering requirements for data-centric projects presents a challenge. Business users may have trouble articulating the type of data needed to build a proper system and asking for changes late in the game can cause major project delays. In this tip,...  Continue Reading

• Attracting the right Agile software developers

  A lot of software development job candidates will claim to have Agile skills, but are they just throwing around buzzwords? In this tip, consultant Catherine Powell will help you find the qualified candidates who live out the values and practices of ...  Continue Reading

• Seven steps for tracking business requirements throughout a software release

  In traditional software development, it can be easy for the business folks to think that their role is to define the requirements and their involvement is not needed again until UAT. However, in order to ensure requirements are implemented as ...  Continue Reading

• Business requirements: Five steps to exceed business expectations

  Regardless of the methodology being used, it is imperative that the development team and the business collaborate throughout the software development lifecycle. In this tip by software expert Kay Diller, we look at ways to maintain a strong ...  Continue Reading

• Embedded software testing: Five messaging event styles

  In testing embedded systems, timing can often cause trouble. In this tip, consultant Scott Allman describes the five different types of event styles that can occur when two events are executed. A good test plan will cover each of those event styles ...  Continue Reading

• Testing-as-a-Service: Outsourcing your specialized software testing

  Testing-as-a-Service (TaaS) solutions are cropping up in the software industry, allowing clients the ability to take advantage of paying for what they need, when they need it, rather than investing in expensive tool sets and experts. In this tip, ...  Continue Reading

• Manual testing vs. automated testing: A decision point

  Automation in a test environment can be expensive and doesn’t always yield a high return. In fact, a high percentage of automation efforts fail. In this tip, Vasudeva Naidu gives advice on key factors that will lead to success in your automation ...  Continue Reading

• Waterfall vs. Agile development: A case study

  Two projects very similar in scope were executed by the same project team for the same users. The first project used a waterfall methodology and resulted in missed deadlines and failure to deliver user requirements. The second used an Agile ...  Continue Reading

• A case study in the use of automation

  Employers are looking for testers with automation skills, but what exactly does that mean? Agile expert and co-author of Agile Testing Lisa Crispin describes real-life examples of the use of tools to automate test scripts. Crispin describes how her ...  Continue Reading

• Testing the user interface: Automated and exploratory testing

  Should user interface (UI) testing be automated or exploratory? In this tip, SSQ contributor Chris McMahon answers that both automated and exploratory testing can be used for UI testing, and what is most effective is using them together. McMahon ...  Continue Reading

• Test automation: When, how and how much

  Test automation has often been touted as an important part of an organization's quality strategy. However, it's not a silver bullet. In this tip, consultant David Johnson describes important considerations in determining when to invest in test ...  Continue Reading

• Specialized testing for your enterprise application

  In this tip, Judith Myerson describes examples of five types of testing for your enterprise applications: cloud testing, user acceptance testing, modular testing, agile testing and incremental testing. Myerson gives a brief overview of each type of ...  Continue Reading

• Agile testing on large-scale projects

  What are key factors to success in agile testing efforts on large-scale projects? Consultant David Johnson suggests they are experience, your agile approach, the size and complexity of your non-agile code base and the long-term ownership of the ...  Continue Reading

• Eight steps for a successful software release

  Have you done everything to prepare for a successful software release? Software project manager Kay Diller describes eight things you can do to ensure your deployment will go smoothly. From creating your team to being prepared with a back-out plan, ...  Continue Reading

• Agile methodology techniques: Unit test, automation and test-driven development

  Yvette Francino explains the basics of unit test, automation and test-driven development. Test-driven development (TDD) is a form of unit testing, originating from the agile methodology XP. The tests are written and executed using short iterations, ...  Continue Reading

• CMMI for development: An overview of a process improvement model

  SEI has released CMMI for Development, v1.3 in October, 2010. This tip provides an overview of the Capability Maturity Model for Integration, explaining some of the basic terminology, including process areas, components and levels of this popular ...  Continue Reading

• Security ALM: Testing throughout the software application lifecycle

  One of the most important aspects of software development today is writing secure software. Yet, for most IT organizations, security testing is introduced too late in the cycle to be of any help. Security expert John Overbaugh shares his experiences...  Continue Reading

• Pair programming: Two people, one computer

  Pair programming, the technique where two programmers use one computer to develop software code, is a practice which has been shown to improve software quality when done well. In this tip, SSQ site editor explores the pros and cons of pair ...  Continue Reading

• Applying lean concepts to software testing

  If we're going to use a factory analogy for software development, shouldn't we at least study the techniques modern factories use? In this tip, software quality expert Matt Heusser describes concepts used first for lean manufacturing, which are now ...  Continue Reading

• Hacking For Dummies: Hacking Methodologies, Chapter 4

  Kevin Beaver teaches the steps for successful ethical hacking, gleaning information about your organization from the Internet, scanning your network and how to look for vulnerabilities. Tools and techniques for ethical hacking are described ...  Continue Reading

• What is a test case? What is a requirement?

  After exploring the definition of a test case by surveying test experts, authors and students, consultant Robin Goldsmith learns that interpretations remain ambiguous and varied. Similarly, the level of detail thought to be needed to define ...  Continue Reading

• Automating software development: The Big Red Button

  Seasoned tester Chris McMahon talks about using automation in all phases and aspects of the software development cycle. Continuous integration, test environments, test data, regression testing, performance testing and deployment are candidates for ...  Continue Reading

• The distinction between functional versus performance requirements

  Senior test architect David Johnson describes the distinction between functional and performance requirements and the benefits from keeping these two test efforts separate. Examining differences in test investment, test ROI and risk, Johnson makes ...  Continue Reading

• Daily Scrum meetings: Must we really stand up?

  Often called the daily stand-up, must everyone at the Daily Scrum meeting literally stand? Which rules are inflexible? How are the rules enforced? Find out the objectives of the Daily Scrum and how agile teams are operating to meet these objectives.  Continue Reading

• Inadequate requirements and what to do about them

  Software requirements are often subjective and poorly written resulting in inadequate requirements documentation. In this tip, QA Director John Scarpino describes some of the reasons behind poor requirements and ways that this can be addressed.  Continue Reading

• The secrets to getting started in your software testing career

  The way to advance in your career includes learning, experience and networking. Software test expert Kevin Beaver gives advice on best ways to further your career. By doing what you love and staying current with continuous learning, you will become ...  Continue Reading

• Success factors for distributed teams

  Distributed agile expert Lisa Crispin describes the structure, management-style and level of acceptance required in order for distributed agile teams to find success.  Continue Reading

• Strategies for minimizing regression defects

  Regression defects, those unexpected defects that result from a fix of another defect, are often the most challenging to find and fix. Expert John Overbaugh describes why these defects are so challenging and offers up techniques, such as automation...  Continue Reading

• Effective bug reporting techniques

  If you've ever had a terrible bug come back "unable to reproduce" or "not worth fixing," you know the pain of writing bug reports. This tutorial covers the basics of effective reporting and provides a few advanced tricks to make the reproduction, ...  Continue Reading

• Agile software testing strategies for managers

  How will agile testing methods be determined? What are the best testing tools? Learn what agile project managers need to know to assure high quality in their tests.  Continue Reading

• Tutorial: Introducing Selenium IDE, an open source automation testing tool

  Selenium, an open source automation testing tool, offers an Integrated Development Environment (IDE) plug-in that unifies the tool with desirable Web browser-based test features. Using Selenium IDE provides easy-to-use record and play back features,...  Continue Reading

• How Agile estimation works

  Without a strong background in development best practices, agile or not, your estimation tactics will likely be futile. According to experts an understanding of TDD, continuous integration and strong code review skills will aid estimation efforts ...  Continue Reading

• Chartering exploratory test efforts in Agile

  Charters outline specific test routes taken when exploratory testing an application. Each charter identifies what is being tested and which system is being subjected to the test. Many agile teams have adopted this method of exploring applications ...  Continue Reading

• Problem pyramid discovering REAL software requirements

  Using the problem pyramid model developed by expert consultant Robin Goldsmith can help make requirements gathering a focused and effective process. By using Goldsmith's model REAL business requirement goal setting is made simpler and results can be...  Continue Reading

• Handling handoffs the Agile development way

  Professional software tester Chris McMahon describes his company's struggle to speed up the testing processes of its C- and COBOL-based system, and how it accomplished this task using techniques that would later fall in line with the Agile Manifesto...  Continue Reading

• Why hybrid waterfall/agile process lessens distributed software development problems

  Software development methodologists have broken into two camps, one in support of waterfall and the other in favor of agile. While both methodologies differ drastically, a combination of the two (the hybrid waterfall/agile model) fills in many of ...  Continue Reading

• Tutorial: Installing and running Selenium-RC in Perl

  Used in conjunction with Selenium's online tutorials, this tip will provide additional guidance on how to start out with Selenium RC in Perl regardless of your platform or server. Once you have Selenium set up, this tip explains how to create and ...  Continue Reading

• ITIL Change Management: How change management fits in an ITIL methodology

  Documentation in the IT Information Library (ITIL) outlines how change management processes should service teams that are adapting source code, but these guidelines aren't always straightforward. In this tip, learn how to use ITIL processes to ...  Continue Reading

• The importance of critical thinking in software test

  Even though there are numerous definitions for the term "software testing," there is common ground. Testers need to use critical thinking skills when diving into the testing of a software application. In this tip, expert Chris McMahon explains ways ...  Continue Reading

• Reliably estimating the requirements effort - Part 2

  In this second part of a two-part article describing techniques to estimate the requirements effort, bottom-up estimates and requirements definition tasks are described. Accurately estimating the requirements effort will help ensure overall project ...  Continue Reading

• Ten quick attacks for Web-based software

  An expert tester offers his insight on common Web-based application flaws and intuitive ways to handle their repair. In this tip learn how to identify weaknesses before going live.  Continue Reading

• Six tours for exploratory testing the business district of your application

  Exploratory testing is sometimes thought to be "directionless testing", but James Whitaker's new book suggests that exploratory testing, is more structured than it is credited for. Exploratory testing is filled with numerous tours or testing ...  Continue Reading

• Network security: Analyze your hosts and ports with nmap, Nessus, and netcat

  Application expert explains security testing tool options like nmap, Nessus and netcat to keep your software safe and secure. According to Chris McMahon some of the key areas to focus on when using open source tools are your ports, IP address and ...  Continue Reading

• A software expert's heuristic for regression testing

  Often, regression testing is what stands between a product in a test lab versus a product in the hands of our users – so we don't want to take longer than we need – but we don't want to haphazardly release a product before its ready.  Continue Reading

• Integrating soapUI into your unit testing practice

  Using SoapUI testing tools is one of the easiest ways to ensure a high-level of application quality and security, thanks to this indepth expert tutorial. In this tip learn the cause and effect of user interface testing, documented in informative ...  Continue Reading

• Using Fist of Five, Planning Poker to reach Agile team consensus

  In these tips, consensus-building tools such as Fist of Five and Planning Poker are introduced. Even when these tools are used, the team must decide how they are going to handle a stale-mate condition and move forward on decisions.  Continue Reading

• Why use POST vs. GET to keep applications secure

  Although POST and GET HTTP requests essentially perform the same command on a Web server, a security expert says there are inherent dangers in using one over the other. Learn why one type of processing request provides more security for your Web ...  Continue Reading

• Nine ways to evaluate automated software testing tools

  Evaluate automated software testing tools more thoroughly with these tips for analyzing cost, support, total cost of ownership, usability and more. This tip suggests questions to ask about each attribute of a tool and a vendor's support for it.  Continue Reading

• Manipulating Business Intelligence to solve dense data warehouse testing issues

  Before diving into a Business Intelligence, data project, development must construct a test strategy. The test strategy must intuitively predict potential software problems. In order to do this, testers and developers need to have insight into what ...  Continue Reading

• Testing data fields in business Intelligence projects

  A software expert explains project requirements for a business intelligence data warehouse. Often, BI development depends on multiple data sources and consistent vendor IDs. A solid understanding of where data is derived from as well as facilitating...  Continue Reading

• Testing SMS texting applications: Key steps and considerations

  A software testing expert describes approaches to testing SMS texting applications. She looks at how SMS testing changes perceptions of everyday texting, and explains key steps in the SMS testing process.  Continue Reading

• Testing Web services' performance with soapUI

  Learn how to write load tests, TestCases and run them with soapUI in this expert tutorial. SoapUI is great for tracking test criteria statistics and locating problem areas are.  Continue Reading

• Tips for debugging your JMeter tests

  Learn how to interpret and debug JMeter HTTP proxy tests in this software testing expert tip. Mike Kelly describes the entire JMeter testing process in this series that explains running a JMeter test, interpreting results and debugging application ...  Continue Reading

• Exploratory testing: Tips and techniques for perfecting software quality

  Exploratory testing is widely used and also often misunderstood. This tutorial offers tips on the best ways to manage exploratory testing and how to use the results for superior software quality. You'll also learn how to choose the best testers in ...  Continue Reading

• Web server weaknesses you don't want to overlook

  When tackling Web application security, focus on weak logins, outdated servers and unnecessary HTTP to put many Web security concerns to rest.  Continue Reading

• How to evaluate, choose software requirements tools

  Learn how to choose the right requirements tool for your organization with a series of steps that consider process, users and tasks. Some basic questions at the beginning of the tool selection process can lead to a well-informed decision. This tip ...  Continue Reading

• Running your first load test with JMeter

  In this tip, we take a look at running your first load test with JMeter, a load testing tool that supports a variety of technologies like HTTP/HTTPS, SOAP, JDBC, LDAP, JMS. These are all commonly used by teams looking to introduce load on a server, ...  Continue Reading

• Recording and running software load tests with JMeter

  Recording JMeter load tests can simplify the creation of Samplers needed for your test plans. This tip explains how to record JMeter test results and analyze the data generated.  Continue Reading

• Free Web proxy security tools software testers should get to know

  Learn how to choose and use free Web proxy tools like BurpProxy, Paros Proxy and WebScarab to boost rich Internet applications' security. Screen shots and directions show ways to use tools for application security in this tip by security expert ...  Continue Reading

• Performance testing tools- Commercial, less expensive and free

  Finding affordable, quality performance testing tools is a major concern in the software industry. This expert tip sheds light on some of the most reputable cost effective ones.  Continue Reading

• Five steps to fostering better software tester and QA results

  Separating the activities of software quality assurance analysts and testers can ensure application quality. This tip suggests steps for keeping QA and testing focused on quality.  Continue Reading

• How to stop developer vs. tester, quality-killing blame game

  Agile expert Zach Nies offers ways to improve software quality by stopping Agile developer-versus-tester fingerpointing. In his 20 years in software development, he's seen human squabbles block quality assurance efforts too often. Here, he explains ...  Continue Reading

• How to improve software user acceptance testing practices

  How application user acceptance testing (UAT) differs from functional testing and ways to improve UAT processes are explained in this tip. Likening UAT to show biz, expert John Overbaugh describes the UAT process and the "rehearsals" that lead up ...  Continue Reading

• Test-driven development face-off: Waterfall vs. Agile

  Most software test pros pick a preferred methology and stand by it, in this tip two testers square-off, one advocating for agile development, the other in the waterfall corner.  Continue Reading

• Rich Internet applications security testing checklist

  Fix common RIA and Web 2.0 application problems typically caused by Ajax, Flash and other technologies with these tips. Software expert Kevin Beaver explains why add-ons, plug-ins and multimedia features are causing more security flaws.  Continue Reading

• Finding cross-site scripting (XSS) application flaws checklist

  Cross-site scripting (XSS) is a major concern, it can be unpredictable and requires multiple tools to test it . Expert Kevin Beaver sheds light on the history of XSS issues and recommends tools to prevent XSS application issues.  Continue Reading

• Seven steps for a quality change and configuration management program

  This tip outlines several ways to ensure you have a topnotch change and configuration management (CCM) division on your project team which is vital in protecting software code.  Continue Reading

• Calculating mean time to failure in performance testing

  Calculating MTTF (mean time to failure) can be a difficult for testers in order to develop a performance test pass as there are multiple steps. This expert tip will guide you through process,  Continue Reading

• Winning responses to "Why is QA always the bottleneck?"

  Executives are notorious for criticizing QA and test pros, often labeling them as the "bottleneck" of software projects. Learn appropriate responses to upper management's unfair and difficult inquiries in this useful tip.  Continue Reading

• Defining report requirements with use cases

  This tip offers a new and interesting way to go about defining and reporting requirements for use cases. There are a number of details that need to be attended to in defining requirements such as taking a look at users and then constructing use ...  Continue Reading

• How requirements use cases facilitate the SDLC

  Learn software use case processes and techniques that result in better application requirements in this tip. Takeaways include use case diagrams and user acceptance test case examples.  Continue Reading

• 5 ways to answer executives' unfair software test, QA questions

  Learn how respond to these difficult management questions and other common software test-related inquiries in this tip. Veteran tester Matt Heusser offers answers to executives' commonly-asked unfair questions about test and QA results.  Continue Reading

• Essentials of static source code analysis for Web applications

  Running security analysis tools against your source code has been the cornerstone test method for years, but many do not understand the value of testing in this way, or the money it can save you.  Continue Reading

• Expert shows seven ways to improve your project management abilities

  Project management offices can benefit when the team has a diverse portfolio of skills. Learn how to become a better project manager by reading these seven suggestions, which range from developing talents and group leaders to better assessing ...  Continue Reading

• Streamlining test planning and design

  Test planning is a crucial step in the design process that is often overlooked or even ignored thought to be needless busy-work that aggravates progress. Expert Robin Goldsmith says otherwise in this two part tip on the Test planning.  Continue Reading

• Five roles test managers play in agile development: Tutorial, part one

  This two-part tutorial explores five higher-order functions where an experienced test manager contributes to an agile organization. This installment covers interfacing with senior management; providing vision and leadership; and fostering ...  Continue Reading

• Quality assurance (QA) and testing's role in requirements

  Common wisdom is to include QA/testing early in the software life cycle, but this practice actually has a number of hidden pitfalls that can reduce the effectiveness of the requirements process.  Continue Reading

• Using session-based test management for exploratory testing

  Two major criticisms of exploratory testing are that progress and coverage are difficult to determine. Session-based test management addresses these concerns.  Continue Reading

• The role of quality assurance (QA) pros in software security

  Along with developers, security managers and IT auditors, QA pros have an active and important role in the information security process.  Continue Reading

• The benefits of exploratory testing in agile environments

  Exploratory testing can help software testers keep up with the rapid development pace of agile software projects. Find out why and how to use exploratory testing in agile.  Continue Reading

• Software testing deliverables: Developing a software testing strategy

  David Johnson updates his popular tip on software testing deliverables with detailed information on forming a test strategy.  Continue Reading

• Common software security risks and oversights

  We have a tendency to focus on the sexy technical side of software security, but many overlooked software security risks have more to do with operational and documentation problems.  Continue Reading

• Defining requirements during software project feasibility analysis

  There are at least two key points in a software project when requirements should be defined. One point people often miss is during feasibility analysis, and failure to define requirements at this stage can doom a project.  Continue Reading

• How project managers can recover from worst case scenarios

  Learn how to recover when a software project goes horribly wrong, due to problems with budgets, clients, stakeholders, schedules or technical failures.  Continue Reading

• Pros and cons of requirements-based software testing

  Learn about the strengths and benefits of requirements-based testing as well as what the detractors say -- which is mostly based on incorrect assumptions about requirements.  Continue Reading

• Two-minute guide to determining software testing coverage

  Get a crash course on deciding which features to test and when and how to test them.  Continue Reading

• Web application security testing checklist

  Testing your Web application security is something that needs be taken seriously. The best way to be successful is to prepare in advance and know what to look for. Here's an essential elements checklist to help you get the most out of your Web ...  Continue Reading