The Test Manager Role – Part 3 – Testability Commitment
Completing the planning of the resources in the previous phase requires now another important step. As a test manager, you need to focus next on creating testability commitment within […]
A tester’s reasoning process
Have you ever asked yourself, what is the most important quality of a good test engineer? If you google now to find out what are the job requirements for […]
The Test Manager Role – Part 2 – Plan Test Resources
After agreeing on an appropriate and achievable set of objectives (in the mission agreement step), for a test manager, the next step would be to define the elements that […]
The Test Manager Role – Part 1 – Mission Agreement
The responsibility for the test effort’s success is the task of the Test Manager. Regardless if you call the role Test Manager, Test Lead or simply QA Engineer, each […]
XSS Cheat Sheet
Based on OWASP, Cross-site Scripting (XSS) is one of the most dangerous type of attacks. Web applications that allow users to store data are potentially exposed to this type of […]
Application Security Framework – How to built it – Part 1 – Security elements
In order to protect information, a solid, comprehensive application security framework in needed for analysis and improvement. This application security framework should be able to list and cover all […]
Test Estimation Process
In order to be have a successful testing project and proper execution of testing tasks, the test estimation process plays an important role in software development life cycle. While […]
Password security: What to test and how to improve your authentication mechanism?
If passwords are used for authentication in your system or application, the security of the access and access rights management of the system is decisively dependent on the correct […]
SEPA test data – IBAN and BIC values for the SEPA payment method
Finding the right set of test data to validate IBAN and BIC fields for SEPA transactions can be a bit of a hustle, since not all information will be […]
Padding Oracle Attack CVE-2016-2017
A padding oracle attack represents an attack performed using the padding bites of a cryptographic message. Plain text messages that have variable length often have to be expanded (padded) […]