As a part of the software industry, it is a basic necessity to create a secure application/product. Security testing is not only about hacking, and can be approached in a structured manner. This presentation will help you understand how to incorporate security in different phases and aspects of software development.
Better End-to-End Testing with Page Objects Model using ProtractorKasun Kodagoda
This presentation focuses on implementing Page Objects Model using Protractor for AngularJS apps for more maintainable, reusable and flexible end-to-end testing for your project. The presentations was done at 99X Technology as a Tech Talk session done by Team Finale.
As a part of the software industry, it is a basic necessity to create a secure application/product. Security testing is not only about hacking, and can be approached in a structured manner. This presentation will help you understand how to incorporate security in different phases and aspects of software development.
Better End-to-End Testing with Page Objects Model using ProtractorKasun Kodagoda
This presentation focuses on implementing Page Objects Model using Protractor for AngularJS apps for more maintainable, reusable and flexible end-to-end testing for your project. The presentations was done at 99X Technology as a Tech Talk session done by Team Finale.
Functional tests are usually the slowest layer of automated tests for almost every product. They use product via UI, store data in real DB, integrate with external services and do other “slow” things. The first easy answer how to make them fast is to run in parallel. But in reality tests depends on the same data and intersect by some common functionality. In this talk we will review useful techniques and approaches how to win this battle.
Using Selenium for Automated testing - basic level: short introduction into the selectors and basic methods used in writing a simple script with Selenium Webdriver.
This is the first part of the web hacking series. It covers some basics and three topics:
~HTMLI
~SQLI to bypass user authentication
~Buffer overflow
I used mutillidae for the demo
Over the last few years, Appium has become the automation tool of choice for mobile application UI testing. Advanced Appium Workshop is a hands on session, which will help people to write cross platform tests with gestures and locator-chaining using PageFactory. Workshop would also focus on iOS 10 using XCUITest backend with the latest appium java-client.Participants need to have knowledge of Appium architecture, ability to write basic test for android/iOS and knowledge of OOPS concepts.
Functional tests are usually the slowest layer of automated tests for almost every product. They use product via UI, store data in real DB, integrate with external services and do other “slow” things. The first easy answer how to make them fast is to run in parallel. But in reality tests depends on the same data and intersect by some common functionality. In this talk we will review useful techniques and approaches how to win this battle.
Using Selenium for Automated testing - basic level: short introduction into the selectors and basic methods used in writing a simple script with Selenium Webdriver.
This is the first part of the web hacking series. It covers some basics and three topics:
~HTMLI
~SQLI to bypass user authentication
~Buffer overflow
I used mutillidae for the demo
Over the last few years, Appium has become the automation tool of choice for mobile application UI testing. Advanced Appium Workshop is a hands on session, which will help people to write cross platform tests with gestures and locator-chaining using PageFactory. Workshop would also focus on iOS 10 using XCUITest backend with the latest appium java-client.Participants need to have knowledge of Appium architecture, ability to write basic test for android/iOS and knowledge of OOPS concepts.
Guangzhou Purple Ox Optoelectronics Technology Co., Ltd., is one of the earliest commitment to the development, production LED light source logo ads, city smart LED lighting and LED lighting products a variety of other applications of high-tech businesses.
The Will to Adorn - Online Collaboration Sitewilltoadorn
This presentation from the 2011 American Folklore Society's annual meeting provides an overview of the Will to Adorn social network used for online collaboration among researchers.
Servicialisation - Service Specifying: Example E-mailing Service V01.05.00servicEvolution
This extract out of another presentation explains and illustrates the complete and consistent service specification for the precisely & succinctly identified service type 'e-mailing service':
- The service providing quality is specified based on agreed & accepted, practical & binding values for the service attributes 01 thru 11.
- The price for seamlessly & reliably rendering a singular & unique e-mailing service is numbered in the identical service attribute 12 'Service Delivering Price'.
- Furthermore, there are 3 different service levels specified with their particular sets of 12 practical attribute values.
- All this fits on 2 pages only and it becomes the nucleus of practical & binding service providing offerings presented by the accountable service provider in its compact & meaning full service catalogue.
Such a service specification is the starting point of any further method & measure for reliable & cost-efficient service providing management (= servuction management). It is the core document for commissioning and committing as well as for rendering and billing explicitly triggered, singular & unique e-mailing services that have been reliably rendered explicitly to triggering service consumers.
Further details about the methodology of servicialisation are
- explained in the whitepaper 'Servicialisation - Introduction'
http://www.slideshare.net/PaulGHz/servicialisation-introduction-v010100
- illustrated the presentation 'Servicialisation - From Service Identifying to Service Billing'
http://www.slideshare.net/PaulGHz/servicialisation-from-service-identifying-to-service-billing-v010000
s. further documents in German:
- Service-Spezifizierung - Service-Typ & Service-Erbringungsqualität
https://www.slideshare.net/PaulGHz/konzeptpapier-servicespezifizierung-servicetyp-und-serviceerbringungsqualitt-v060100pdf
- Service-Identifizierung - Service-Typ & Wesensmerkmale
https://www.slideshare.net/PaulGHz/konzeptpapier-serviceidentifizierung-servicetyp-wesensmerkmale-v060200pdf
- Service-Kategorien - Service-Objekttypen & Nutzeffekttypen
https://www.slideshare.net/PaulGHz/konzeptpapier-servicekategorien-serviceobjekttypen-nutzeffekttypen-v060200pdf
- Service-Konsument - Wertschöpfer & Umsatzbringer
https://www.slideshare.net/PaulGHz/konzeptpapier-servicekonsument-wertschpfer-umsatzbringer-v060300pdf
- Service Provider - Service-Trilemma & Geschäftsmodell
https://www.slideshare.net/PaulGHz/konzeptpapier-service-provider-servicetrilemma-geschftsmodell-v060200pdf
- Service-Definition - Herleitung & Anwendung
https://www.slideshare.net/PaulGHz/konzeptpapier-servicedefinition-herleitung-und-anwendung-v060200pdf
- Glossar Service-Terminologie
https://www.slideshare.net/PaulGHz/servicialisierung-glossar-serviceterminologie-v070000
- Diskussionspapier 'Workshop 'Service-Definition''
https://www.slideshare.net/PaulGHz/diskussionspapier-workshop-servicedefinition-v090000
Management and programmers are both stressed out by project estimates. Software teams often over-commit, compounding the problem. A lot goes into making better estimates and commitments, but this talk gives you a simple place to start, by expanding your vocabulary about "When Will You Be Done" to include Commitment and Target, as well as Estimate.
Unify service and ui layer automation bdd way.pptx (1)Shivaling Sannalli
In this presentation/session we will focus on how we can combine both service layer tests and UI layer tests in a BDD(Behavior Driven Development) way of Automation. That will bring test coverage visibility to business. Clients themselves can run this suite without having to understand technicalities of the implementation. Test scenarios will exactly be the requirements captured by business as behaviors
AngularJS with TypeScript and Windows Azure Mobile ServicesRainer Stropek
In the coming two weeks I will do a series of talks at various conferences in Austria and Germany. I will speak about AngularJS, TypeScript, and Windows Azure Mobile Services. In this blog post I publish the slides and the sample code.
I Know It Was MEAN, But I Cut the Cord to LAMP AnywayAll Things Open
All Things Open 2014 - Day 2
Thursday, October 23rd, 2014
Brian Hyder
Co-Founder & CTO of PencilBlue, LLC
Back Dev
I Know It Was MEAN, But I Cut the Cord to LAMP Anyway
Selenium RC: Automated Testing of Modern Web Applicationsqooxdoo
This talk is concerned with automated testing of Web applications. It
looks at testing Web apps in general, its goals and challenges; it will
present Selenium and Selenium RC in particular as a testing platform;
and will then focus on adaptions made to Selenium to ease the effort
to test apps made with qooxdoo, a JavaScript framework.
Microservices with .Net - NDC Sydney, 2016Richard Banks
Presented at NDC Sydney, August 2016
Thanks to organisations like Netflix, and the need to develop solutions that scale well in the cloud, microservices have become the hot new topic. Yet, for all the talk, there are few practical examples of how you actually build a microservice in .NET.
It's time to fix that little oversight as we show you how you can build a microservices based solution using .NET, and a number of open source tools (EventStore, RabbitMq and Redis to name a few).
You'll also get to understand the pros and cons of a microservices solution and consider how a microservices approach might impact how you and your team relate to your customers.
Key Trends Shaping the Future of Infrastructure.pdfCheryl Hung
Keynote at DIGIT West Expo, Glasgow on 29 May 2024.
Cheryl Hung, ochery.com
Sr Director, Infrastructure Ecosystem, Arm.
The key trends across hardware, cloud and open-source; exploring how these areas are likely to mature and develop over the short and long-term, and then considering how organisations can position themselves to adapt and thrive.
Kubernetes & AI - Beauty and the Beast !?! @KCD Istanbul 2024Tobias Schneck
As AI technology is pushing into IT I was wondering myself, as an “infrastructure container kubernetes guy”, how get this fancy AI technology get managed from an infrastructure operational view? Is it possible to apply our lovely cloud native principals as well? What benefit’s both technologies could bring to each other?
Let me take this questions and provide you a short journey through existing deployment models and use cases for AI software. On practical examples, we discuss what cloud/on-premise strategy we may need for applying it to our own infrastructure to get it to work from an enterprise perspective. I want to give an overview about infrastructure requirements and technologies, what could be beneficial or limiting your AI use cases in an enterprise environment. An interactive Demo will give you some insides, what approaches I got already working for real.
JMeter webinar - integration with InfluxDB and GrafanaRTTS
Watch this recorded webinar about real-time monitoring of application performance. See how to integrate Apache JMeter, the open-source leader in performance testing, with InfluxDB, the open-source time-series database, and Grafana, the open-source analytics and visualization application.
In this webinar, we will review the benefits of leveraging InfluxDB and Grafana when executing load tests and demonstrate how these tools are used to visualize performance metrics.
Length: 30 minutes
Session Overview
-------------------------------------------
During this webinar, we will cover the following topics while demonstrating the integrations of JMeter, InfluxDB and Grafana:
- What out-of-the-box solutions are available for real-time monitoring JMeter tests?
- What are the benefits of integrating InfluxDB and Grafana into the load testing stack?
- Which features are provided by Grafana?
- Demonstration of InfluxDB and Grafana using a practice web application
To view the webinar recording, go to:
https://www.rttsweb.com/jmeter-integration-webinar
Neuro-symbolic is not enough, we need neuro-*semantic*Frank van Harmelen
Neuro-symbolic (NeSy) AI is on the rise. However, simply machine learning on just any symbolic structure is not sufficient to really harvest the gains of NeSy. These will only be gained when the symbolic structures have an actual semantics. I give an operational definition of semantics as “predictable inference”.
All of this illustrated with link prediction over knowledge graphs, but the argument is general.
Connector Corner: Automate dynamic content and events by pushing a buttonDianaGray10
Here is something new! In our next Connector Corner webinar, we will demonstrate how you can use a single workflow to:
Create a campaign using Mailchimp with merge tags/fields
Send an interactive Slack channel message (using buttons)
Have the message received by managers and peers along with a test email for review
But there’s more:
In a second workflow supporting the same use case, you’ll see:
Your campaign sent to target colleagues for approval
If the “Approve” button is clicked, a Jira/Zendesk ticket is created for the marketing design team
But—if the “Reject” button is pushed, colleagues will be alerted via Slack message
Join us to learn more about this new, human-in-the-loop capability, brought to you by Integration Service connectors.
And...
Speakers:
Akshay Agnihotri, Product Manager
Charlie Greenberg, Host
UiPath Test Automation using UiPath Test Suite series, part 3DianaGray10
Welcome to UiPath Test Automation using UiPath Test Suite series part 3. In this session, we will cover desktop automation along with UI automation.
Topics covered:
UI automation Introduction,
UI automation Sample
Desktop automation flow
Pradeep Chinnala, Senior Consultant Automation Developer @WonderBotz and UiPath MVP
Deepak Rai, Automation Practice Lead, Boundaryless Group and UiPath MVP
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered QualityInflectra
In this insightful webinar, Inflectra explores how artificial intelligence (AI) is transforming software development and testing. Discover how AI-powered tools are revolutionizing every stage of the software development lifecycle (SDLC), from design and prototyping to testing, deployment, and monitoring.
Learn about:
• The Future of Testing: How AI is shifting testing towards verification, analysis, and higher-level skills, while reducing repetitive tasks.
• Test Automation: How AI-powered test case generation, optimization, and self-healing tests are making testing more efficient and effective.
• Visual Testing: Explore the emerging capabilities of AI in visual testing and how it's set to revolutionize UI verification.
• Inflectra's AI Solutions: See demonstrations of Inflectra's cutting-edge AI tools like the ChatGPT plugin and Azure Open AI platform, designed to streamline your testing process.
Whether you're a developer, tester, or QA professional, this webinar will give you valuable insights into how AI is shaping the future of software delivery.
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...UiPathCommunity
💥 Speed, accuracy, and scaling – discover the superpowers of GenAI in action with UiPath Document Understanding and Communications Mining™:
See how to accelerate model training and optimize model performance with active learning
Learn about the latest enhancements to out-of-the-box document processing – with little to no training required
Get an exclusive demo of the new family of UiPath LLMs – GenAI models specialized for processing different types of documents and messages
This is a hands-on session specifically designed for automation developers and AI enthusiasts seeking to enhance their knowledge in leveraging the latest intelligent document processing capabilities offered by UiPath.
Speakers:
👨🏫 Andras Palfi, Senior Product Manager, UiPath
👩🏫 Lenka Dulovicova, Product Program Manager, UiPath
Accelerate your Kubernetes clusters with Varnish CachingThijs Feryn
A presentation about the usage and availability of Varnish on Kubernetes. This talk explores the capabilities of Varnish caching and shows how to use the Varnish Helm chart to deploy it to Kubernetes.
This presentation was delivered at K8SUG Singapore. See https://feryn.eu/presentations/accelerate-your-kubernetes-clusters-with-varnish-caching-k8sug-singapore-28-2024 for more details.
DevOps and Testing slides at DASA ConnectKari Kakkonen
My and Rik Marselis slides at 30.5.2024 DASA Connect conference. We discuss about what is testing, then what is agile testing and finally what is Testing in DevOps. Finally we had lovely workshop with the participants trying to find out different ways to think about quality and testing in different parts of the DevOps infinity loop.
The Art of the Pitch: WordPress Relationships and SalesLaura Byrne
Clients don’t know what they don’t know. What web solutions are right for them? How does WordPress come into the picture? How do you make sure you understand scope and timeline? What do you do if sometime changes?
All these questions and more will be explored as we talk about matching clients’ needs with what your agency offers without pulling teeth or pulling your hair out. Practical tips, and strategies for successful relationship building that leads to closing the deal.
GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...James Anderson
Effective Application Security in Software Delivery lifecycle using Deployment Firewall and DBOM
The modern software delivery process (or the CI/CD process) includes many tools, distributed teams, open-source code, and cloud platforms. Constant focus on speed to release software to market, along with the traditional slow and manual security checks has caused gaps in continuous security as an important piece in the software supply chain. Today organizations feel more susceptible to external and internal cyber threats due to the vast attack surface in their applications supply chain and the lack of end-to-end governance and risk management.
The software team must secure its software delivery process to avoid vulnerability and security breaches. This needs to be achieved with existing tool chains and without extensive rework of the delivery processes. This talk will present strategies and techniques for providing visibility into the true risk of the existing vulnerabilities, preventing the introduction of security issues in the software, resolving vulnerabilities in production environments quickly, and capturing the deployment bill of materials (DBOM).
Speakers:
Bob Boule
Robert Boule is a technology enthusiast with PASSION for technology and making things work along with a knack for helping others understand how things work. He comes with around 20 years of solution engineering experience in application security, software continuous delivery, and SaaS platforms. He is known for his dynamic presentations in CI/CD and application security integrated in software delivery lifecycle.
Gopinath Rebala
Gopinath Rebala is the CTO of OpsMx, where he has overall responsibility for the machine learning and data processing architectures for Secure Software Delivery. Gopi also has a strong connection with our customers, leading design and architecture for strategic implementations. Gopi is a frequent speaker and well-known leader in continuous delivery and integrating security into software delivery.
Generating a custom Ruby SDK for your web service or Rails API using Smithyg2nightmarescribd
Have you ever wanted a Ruby client API to communicate with your web service? Smithy is a protocol-agnostic language for defining services and SDKs. Smithy Ruby is an implementation of Smithy that generates a Ruby SDK using a Smithy model. In this talk, we will explore Smithy and Smithy Ruby to learn how to generate custom feature-rich SDKs that can communicate with any web service, such as a Rails JSON API.
2. Key
Take
Aways:
❏ What Web Services are and why we
use them
❏ How to test a Web Service in
multiple ways
❏ Increased familiarity with test
automation
3. Web Services
● Interface to provide access to
functionality
● Uses HTTP/HTTPS/SMTP for
communication
● Communicates using
JSON/XML/CSV/Plain Text etc.
4. When and Why
Same functionality multiple UIs:
● Customise cross platform
● Multiple apps
● Different vendors
Being able to implement one
service and use that functionality
across all these different displays
5. Let see an example!
...things get clearer when you can see them :)
6. An Example
Booking a ticket with Orange Bus via
different agencies
RedBus UI TravelYari UI Orange Bus UI
Book
a seat
Book
a seat
Get bus
details
Orange Bus Web Service
7. Another Example
Website serving request:
Weather Underground
Underlying HTTP request:
curl -X GET
http://api.wunderground.com/api/e8
96598d74613088/conditions/q/zmw:
00000.1.43128.json
15. Response Codes
Outcome of a request:
● 1xx - Informational
● 2xx - Success
● 3xx - Redirection
● 4xx - Client Error
● 5xx - Server Error
16.
17.
18.
19.
20.
21.
22. QAs and Web Services
...based on our experiences testing web services out in the wild...
23. How testing helps
● Business issues first then the
presentation issues
● Early feedback
● Debug in different layers
● Save time retesting
● More confident app works
● Release more frequently
● Lots more….
33. Suggestions
● Automate as you go
● Cross role pairing
● Integrate with build pipeline
● If the service is broken no need
to test UI
● Spread the word! :)
34. Key
Take
Aways:
❏ What Web Services are and why we
use them
❏ How to test a Web Service in
multiple ways
❏ Increased familiarity with test
automation
Shiva: What are WebServices; Importance of Web Services
Learn HOw do we test a WebService using different tools and programming libraries
Get familiarised with automating WebService.
Fiona (add an example to the explanation)
Using web services have been growing in popularity as a interfact for users to interact with systems and for systems to communicate with one another
They are an way to access resources needed such as images, files, web pages, data etc.
REST is not dependent on any protocol, but almost every RESTful service uses HTTP as its underlying protocol.
Common formats for the messages they exchange are listed here but there are more and it depends on the individual requirements
Shiva: Application A is written in 1 framework may be JAVA and SPRINGS, can use service available in other application
Shiva
Fiona
another example of a web service is Weather Underground.
They collect weather data from weather stations over the world and provide that data to people who wish to use it.
Lets have a look at how a request for data about weather in Hyderabad is received in the browser…
...then lets see the same thing in the command line using the curl command
Fiona
Apologies for such an acronym heavy slide, please bear with me while I ensure we are all on the same page for these terms.
REST is one architectural approach to web services which is growing in popularity.
It uses moslty the HTTP(S) protocol for CRUD functionality: creation, reading, updating and deleting of resources.
URIs are the id of some data which is being referred to in the requested
SOAP (Simple Object Access Protocol) is a protocol with uses XML. Its an alternative to REST. SOAP was popular previously but systems built more recently would often be design in a RESTful way so we are seeing less and less SOAP now.
Fiona
A request cannot be dependent on a past request and a service treats each request independently.
Assuming the system has enough load to require more than 1 node … which is pretty common … its important to consider how to handle the likely even where the first and second request go to different nodes or instances of the web service. A key part of a restful architecture is that each request from any client contains all the information necessary to service the request
For instance a real world physical example, lets say we walk into a store, they are a huge company with stores all over the globe and thousands of staff members. We make an order with this company and they provide us with an id. If we want to check the status of this order we might not find outselves chatting to the exact staff member again, or they might have served another customer since then and forgotten us, it could be whichever staff member is free, or we might be in a different store. In order for the staff member to be able to responde to our status request we need to provide some information again along with the request. These staff members are like the nodes, they will all be looking at the same system to get your status, you walked into the same store or called the same number, but the nodes or staff themselves are individuals. So they need context on how to help you.
Shiva
Mention “Application Programming Interface” - API
Shiva
Separate slide for request and response.
Consider using a screenshot of postman.
Shiva
Separate slide for request and response.
Consider using a screenshot of postman.
Fiona
Get - request a resource, header might be used to specify some conditions similar to a query. Should only read data and shouldnt effect its state.
Post - provides some resource (or data) which the service will handle, could override, update, append, act upon...
Put - provides some resource which will be placed exactly at that URI location. If there is something already put there it will be overridden
Delete - removes the resource at the URI location. Could be stopped by the server but ideally shouldn't say it succeeded unless that resource was deleted but technically could
Fiona
There are a lot of potential responses but they can be grouped into these 5 main types. Error codes starting with there initial numbers help you to know which type they are. Lets cover some of the most common/important ones in more detail
Success! Your request was fulfilled.
Success! This request caused something to be created/added/updated successfully. Most likely you posted some data which cased this response
Error, Oops, something went wrong. Seems like there’s a problem with the request you made.
Error, Oops, something went wrong. Seems that you arent permitted to do that request or arent correctly proving your right to perform that request
Error, Oops something went wrong. Seems that the request is correct and you have the permission but the thing you asked for isnt there
Error on the other side. Seems like the web service you are making a request to has some issues.
Shiva
Shiva:
UNIT Testing: Talk about TDD: example of writing tests first and developing later
Fiona
Fiona
Shiva
Shiva
Shiva
Shiva
Shiva:
Automate as you GO: Automate in parallel any other activies(Manual)
Cross Role : Code Review, Stop a Bug before being raised , Developers as well can Test , Pairing with BAs can encounter which is missing in the business flow.