Software Test Professionals Community Articles
Articles written by the STP community of professionals.
Minimize The Risks That You’re Stepping Into
When You Must Buy Versus Build, There Are Ways To Help You Avoid Any Slip-ups More and more projects involve integration of custom-developed or commercial-off-the-shelf (COTS) components, rather than in-house development or enhancement of software. In effect, these...

Take Automated Testing Out Of The Cave
Even Troglodytes Can Understand Automation with This Framework Approach Test automation typically relies on a select group of technical people within the QA organization for development and maintenance. This dependence can be magnified when an automation...

Playing the Part of Protector
Implementing User Role-Based Security Testing For Enterprise Applications Security has become a critical issue at many levels, including access to individual computers, networks, services, applications and accounts. News reports of security breaches are all too...

If You Build It, They Will Come
As I write this, I'm thinking of last night's midsummer classic—the 2007 All-Star Game—in which the National League was an extra base-hit away from a dramatic ninth-inning, come-from-behind win. But alas, the American League will again have home-field advantage in the...

Don’t Leave Security for Last
By integrating security assurance into the software lifecycle, you can improve product quality—and avert disaster! At the peak of the dot-com boom, my firm consulted extensively for large organizations concerned about the risks of Internet-based applications. My...

Extend Beyond JUnit’s Basic Color Palette
Four Steps For Taking Unit Testing To the Next Level For Java EE What’s the first thing that comes to mind when you think about unit testing? If you’re a Java developer, it’s probably JUnit, since the tool is generally recognized as the de facto standard for Java unit...

An Automated Test Postcard From Cairo
Toiling as a tech drone in one of the countless North American cubicle farms, it can be tempting to think that life must be better somewhere else. Over¬Toiling as a tech drone in one of the countless North American cubicle farms, it can be tempting to think that life...

Testers Don’t Do Security Testing – But We Should
When we met, we both worked at the same Fortune 500 security company. Unknown faces to each other in a large corporation, we reported to the same senior VP. That day, we both attended an all-day company technical exchange meeting. Chris was one of the project...

Data Protection Measures For Multi-tier Architectures
Over the past few years, we have seen data security moving away from the database layer into the application/business logic layer. In a two-tiered environment, the presentation layer used the authentication and authorization mechanism of the database management system...

Unit Testing: It’s Like a Box Of Chocolates
Nominally, unit testing is a QA function. After all, it’s part of the process of ensuring that an application works correctly. Developers are responsible for creating the application in the first place—and surely that’s enough to keep track of. As a result, it seemed...