As mobile devices, tools, operating systems, and web technologies rapidly evolve, testers must quickly adapt their thinking in this changing domain. Testers often struggle to find important vulnerabilities and bugs in mobile applications due to lack of guidance, experience, and the right resources. Raj Subramanian was a tester in that very situation. Hear what Raj learned from his experiences testing mobile applications previously at Orbitz and now at CSG Ascendon. CSG uses a cloud-based commerce and service delivery platform to deliver digital content to customers like SONY, Paramount, Cineplex, Disney, ESPN, COMCAST, Time Warner, Dish. He explores test techniques and tools you can use to get quick feedback about your mobile applications. With live demos and screenshots, Raj demonstrates things testers need to know about the mobile ecosystem and the tests that need to be in their suite. Take back test strategies and tools to apply in your real-world situations.

1. W6
Track Session
4/20/2016 11:00 AM
"How to Find Vulnerabilities and
Bugs in Mobile Applications"
Presented by:
Raj Subramanian
CSG International
Brought to you by:
340 Corporate Way, Suite 300, Orange Park, FL 32073
888-268-8770 · 904-278-0524 · info@techwell.com · www.techwell.com

2. Raj Subramanian
CSG International
Raj Subramanian, a former developer for a payroll processing company, moved
to testing to focus on his passion. Raj currently works as a mobile test lead for a
large product and services company. He actively contributes to the testing
community by speaking at conferences, writing articles, blogging, and being
directly involved in various testing-related activities. He currently resides in
Chicago and can be reached at raj@rajsubra.com. His website is
www.rajsubra.com and twitter handle - @epsilon11.

3. How To FindVulnerabilities and Bugs in Mobile Applications
by
Raj Subramanian
@epsilon11

4. Agenda
• Introduction
• Testing Process
• Heuristic Based Mobile Testing Model
• Testing Tools
Introduction

5. My Bio
• Mobile Test Lead at CSG Ascendon
• Over 10 years experience in testing
• Actively involved in testing community
• Testing articles
• Blogging
• Speaking
For more info - www.rajsubra.com
Mobile Ecosystem

6. Mobile Ecosystem
The Context
• Experience report
• Research
• Point of view
Image: http://farm9.staticflickr.com/8078/8314929977_36b1d58cf6_o.jpg

7. Testing Process
Testing Process

8. Step 1- Research current
problems and process
• What productions problems have we had?
• What problems are hard to find and test?
• What areas of testing are time consuming?
• What are the critical components of the
system which MUST work?
Step 2- Get a handle on
Test Devices
• What devices do we have for testing?
• What are the configurations?
• How do we track the devices?
• Is there a process in place?

9. Step 3- Create ONE
Central Testing Repository
• One stop solution for all testing resources
• Test Accounts,Test URLs, How to get
access to databases, sharepoint etc.
• Useful for Onboarding or Cross platform
testing
Heuristic Based Mobile
Testing Model

10. I - Interrupt Testing
• Interrupt testing
• Sending text messages
• Calling phone
• Disabling javascript

11. W-WiFi/4G
Defects

12. Defects
E-End User Scenarios

13. Defects
Defects

14. Defects
Defects

15. L-Logs
• Crash Logs
• Console Logs
Mobile Testing - Native

16. L-Logs
A-Application Lifecycle

17. Defects
Mobile Testing - Device
• Back buttoning
• Hard buttons
• Soft buttons

18. Defects
C-Consistency
• Is your app consistent across multiple
devices?
• Is your customer getting the same
experience?

19. Defects
K-Keypads
• Most overlooked area of testing
• It can break applications

20. Defects

21. U-User Reviews

22. I-Installation Testing
• What happens?
• Delete the app and install new app
• Delete cache, uninstall app and install
new app
• Install app over existing app
• Install app over Wi-Fi/4G/Bluetooth/USB

23. P-Performance
• Dynamic images, Maps,Web Service Calls,
Client side validations
• Tools for performance testing
• Instruments - Xcode
• Adb tool - Android Studio, IntelliJ
B,S-Battery Life and
Storage
• Leave your app on for a day and monitor
battery life. (close all other apps and
daemon process, have logs)
• How much memory does your app
consume? Compare it to competitor apps

24. Testing Tools

25. Testing Tools
• Appium
• Sikuli
• Adobe Edge Inspect
• Test Studio
• SeeTest
• DeviceAnywhere
• perfecto mobile
For more info - www.rajsubra.com
Appium
For more info - www.rajsubra.com

26. Appium Demo

27. Summary
• Introduction
• Testing Process
• Heuristic Based Mobile Testing Model
• Testing Tools
Contact Details
e-mail: raj@rajsubra.com
website: www.rajsubra.com
twitter: @epsilon11