1. 軟體專業技術課程與講座簡介
Tony Hsu
1

2. About Me – Tony Hsu 徐祥智
14+ Years Passionate
10+ Yrs. Management
on Software Development
1500+ Engineers in TW Site
QA Expertise
• QA Process/Methodology
• Domain-based Testing
• Cloud/Mobile/Consumer/Ent. solution
Interviewed by Manager Mag.
“Cross-Site Management”
RD Management
• 30+ team size project Mgn
• $30M quarterly budget review
• 50+ training hours delivered.
• $200M revenue for released projects.
• 1500+ Engineers Site training program.
• 80+ Secure code Scanning per quarter.
• SCRUM/Agile/Kanban/ITIL process
improvement.
2

3. 授課經驗
3

4. My Blog 軟體品管的專業思維
4
 http://www.qa-knowhow.com/

5. Web Security Testing
 Objective
 Top 10 web security and vulnerability verification and testing.
 Security Issue prevention through development life cycle.
課程大綱
• Top 10 Web vulnerability
•Secure Software Practices through SDLC
• Manual testing by Browser addon
• Automation Testing (ZAP, Vega)
• Prevention
• Web Log analysis
• Case study
• Security testing reporting
5

6. Network Forensic by WireShark
 Objective
 Network issue identification from the packets
 Identify potential Security issue
課程大綱
•WireShark uses and analysis
• Network capture and network segment
• Network protocol (TCP/IP/HTTP/DNS)
• Suspicious traffic
• Identification of Network slow issue
• Hacked Network packets forensics
6

7. Windows Troubleshooting by SystemInternals
 Objective
 Identify root/cause of Windows issue (leak, hang or crash.)
 Performance issue monitoring and analysis
課程大綱
• Windows architecture (thread, process, job. System process)
• how to identify malware and suspicious process
• How to identify the performance issue for Windows application
• Crash, leakage, hang issue root/cause analysis
• Windows system internals tools usage
• Case study
7

8. MS Database Performance Tuning
 Objective
 MS Database Performance monitoring
 MS database Performance best practices for Design, testing and
operation
課程大綱
• MS database performance and architecture basics
•MS database performance monitoring by DMV
• Performance metrics and methodology
• MS SQL query design best practices
• Query execution plan and query optimization
• Index efficiency and best practices
8

9. Performance Testing
 Objective
 Web service performance load/stress testing by Jmeter
 Windows/Linux key performance metrics monitoring and
tuning.
課程大綱
• Performance tools/ metrics
• Performance analysis for CPU, Memory, Disk and network
• Tuning options for apache, mysql and linux
• Windows Performance Tools (ProcessMon, ProcessExplorer
Perfmon)
• Linux Performance tools (Top , iostat, vmstat )
9

10. Web Service Automation testing by selenium
 Objective
 Web UI Automation testing/operations by Selenium
課程大綱
•Web UI testing /operation automaton by
Selenium/python
•How to complete the automation “without” coding.
• Prepare the selenium coding environment
• your 1st automation scripts
• handing of complex Web UI (i.e. Ajax, alert)
10

11. Malware Analysis
 Objective
 Suspicious file or malware analysis
課程大綱
• Malware type (EXE, DLL, DOC/PPT)
• Malware static analysis
• Malware dynamic analysis
• Reverse Engineering
11