Srijan's delivery methodology is evolving rapidly. We're adopting Agile development methodologies, specifically SCRUM.
As part of this adoption, we're changing the way we engage with customers, and evolving our contracts accordingly as well.
This document shares more about our stage of evolution and Agile and SCRUM software development process adoption.
[AgileCMMI] Practical Experience Report: Application of Project Management ar...davidobama
The Capability Maturity Model Integration (CMMI) has been broadly used for assessing organizational maturity and process capability throughout the world. Although most of the customers give priority to CMMI certified organizations over others for guaranteeing the quality, the nature of their rapid market change can no longer accept heavyweight plans, requirements specification, change requests, contract negotiation, and other documentation. Moreover, the rapid change in information technology has caused increasing the frustration more, especially that there are new competitors started using lightweight processes that invite to customer collaboration over contract negotiation and working software over comprehensive documentation that is called “Agile” methodologies that have been adopted to tackle this challenge. Agile development methods and CMMI are often perceived to be at odds with each other. In fact, it’s possible to embrace both to dramatically improve business performance. This paper focuses on the verification of implementing CMMI Project Management process areas in agile organizations based on a real and practical experience in Agile and CMMI successful projects.
The authors are going to share their practical experiences in interpreting the CMMI model's project management practices in an Agile environment to address the model intent and not compromising on the credibility or value of the practices.
From http://www.ndia.org/meetings/0110
and http://www.agilecmmi.blogspot.com
3 patterns to scale scrum in large organizations. Specifically looking at how UX professionals can support and scale the role of the product owner. Presented at the Big Design Week 2011 in Dallas, TX
The purpose of the iteration planning meeting is for the team to commit to the completion of a set of the highest ranked product backlog items. This commitment defines the iteration backlog and is based on the team’s velocity or capacity and the length of the iteration timebox.
[AgileCMMI] Practical Experience Report: Application of Project Management ar...davidobama
The Capability Maturity Model Integration (CMMI) has been broadly used for assessing organizational maturity and process capability throughout the world. Although most of the customers give priority to CMMI certified organizations over others for guaranteeing the quality, the nature of their rapid market change can no longer accept heavyweight plans, requirements specification, change requests, contract negotiation, and other documentation. Moreover, the rapid change in information technology has caused increasing the frustration more, especially that there are new competitors started using lightweight processes that invite to customer collaboration over contract negotiation and working software over comprehensive documentation that is called “Agile” methodologies that have been adopted to tackle this challenge. Agile development methods and CMMI are often perceived to be at odds with each other. In fact, it’s possible to embrace both to dramatically improve business performance. This paper focuses on the verification of implementing CMMI Project Management process areas in agile organizations based on a real and practical experience in Agile and CMMI successful projects.
The authors are going to share their practical experiences in interpreting the CMMI model's project management practices in an Agile environment to address the model intent and not compromising on the credibility or value of the practices.
From http://www.ndia.org/meetings/0110
and http://www.agilecmmi.blogspot.com
3 patterns to scale scrum in large organizations. Specifically looking at how UX professionals can support and scale the role of the product owner. Presented at the Big Design Week 2011 in Dallas, TX
The purpose of the iteration planning meeting is for the team to commit to the completion of a set of the highest ranked product backlog items. This commitment defines the iteration backlog and is based on the team’s velocity or capacity and the length of the iteration timebox.
High Quality Software Development with Agile and ScrumLemi Orhan Ergin
Module 1. Born to fail
- Why projects are failing
- Waterfall & traditional software development
Module 2. Agile
Module 3. Scrum
Module 4. Writing high quality software with Agile
- XP
- How Google Write Software
Module 5. Do's and dont's
- How Scrum might fail
- Myths and realities
Module 6. How to kick off Scrum
This is a presentation to my training "Scrum Basics" that is based on Scrum guide. On the training I provide introductory information on Scrum principles, events, artifacts and roles. Apart from a lecturing part (that is described in the presentation), we play games and do exercises, that helps us to practice the theory and get our own experience of Scrum usage.
Flexibility in Software Development Methodologies: Needs and BenefitsCognizant
Companies can benefit from introducing flexibility into their software development methodologies, including incorporation of the Waterfall and Scrum models in different software modules of the same project and utilizing geographically distributed teams.
Scrum Overview for Agile Software Development. ... Scrum is a project management framework that is applicable to any project with aggressive deadlines, complex requirements and a degree of uniqueness. In Scrum, projects move forward via a series of iterations called sprints. Each sprint is typically two to four weeks long.
Learn and Grow:
We give trainings for following courses:
Selenium with Java Online Training
Selenium with C# Online Training
JMeter Online Training
CodedUI Online Training
QTP Online Training
Manual Testing Online Training
ISTQB Certification Training
Scrum Master Training
Website : http://globalsqa.com/onlineTrainings.html
Email : contact@globalsqa.com
[Srijan Wednesday Webinar] How to Run Stateless and Stateful Services on K8S ...Srijan Technologies
Speaker: Adheip Singh, Senior DevOps
Kubernetes has taken the tech world by storm. As an orchestration platform, it has eased the deployment & scaling of stateless applications. However, managing complex, in particular stateful applications, is a major pain.
The extensibility of Kubernetes has led to the development of a rapidly evolving ecosystem around K8S. And as an outcome of this extensibility, Kubernetes Operators were designed which eased packaging, deployment as well as management of a Kubernetes application.
In this webinar, we will talk about K8S, with a focus on extensibility and architectural aspects of K8S operators. Additionally, we will perform a live demo of our attempt at writing a Drupal Operator.
Key Takeaways
Understand the extensibility of Kubernetes
- Conceptually understand how to run stateless and stateful services on K8S
- Learn all about K8S operators
- Get a hands-on demo for writing a Drupal Operator
Who is this for
- DevOps
- Technical Architects
- Software Developers
- Anyone interested in learning how to run Drupal workloads on Kubernetes and extensibility of Kubernetes
View all our webinars at: https://www.srijan.net/webinar
[Srijan Wednesday Webinars] How to Set Up a Node.js Microservices Architectur...Srijan Technologies
Microservices architecture application starts faster, which makes developers more productive, and speeds up deployments. But when is the right time to split your services? And how do you do it?
In this session, we will talk about all different use cases where we can think of splitting services and make them independent of one another. We’ll then take a deep dive into Node.js services which can run on different containers and communicate with different data sources. We will take a look at how to deploy on Docker containers running on PM2 instances.
Key Takeaways:
- Configuring and running microservices locally with Docker and Docker Compose
- Splitting services and allowing network communication between them
Managing the Docker network to bind all services together
- Utilizing volumes to mount your code into a container
- Testing the entire set of services with functional, unit and integration tests inside a Docker container
- Debugging a running Docker container
- Enabling services running in different containers to talk to one other like mongo & MySQL with Node app container
[Srijan Wednesday Webinars] How to Build a Cloud Native Platform for Enterpri...Srijan Technologies
Drupal has been a consistent leader in the Gartner Magic Quadrant for Web Content Management. However, enterprises leveraging Drupal have traditionally relied on PaaS providers for their hosting, scaling and lifecycle management. And that usually leads to enterprise applications being locked-in with a particular cloud or vendor.
As container and container orchestration technologies disrupt the cloud and platform landscape, there’s a clear way to avoid this state of affairs. In this webinar, we discuss why it's important to build a cloud-native Drupal platform, and exactly how to do that.
Join the webinar to understand how you can avoid vendor lock-in, and create a secure platform to manage, operate and scale your Drupal applications in a multi-cloud portable manner.
Key Takeaways:
- Why you need a cloud-native Drupal platform and how to build one
- How to craft an idiomatic development workflow
- Understanding infrastructure and cloud engineering - under the hood
- Demystifying the art and science of Docker and Kubernetes: deep dive into scaling the LAMP stack
- Exploring cost optimization and cloud governance
- Understand portability of applications
- A hands-on demo of how the platform works
[Srijan Wednesday Webinars] Using Drupal as Data Pipeline for Digital SignageSrijan Technologies
Speaker: Mike Madison, Acquia
Digital signs are a completely different creature than standard websites, mobile applications, or really just about anything else you might be building. In particular, delivery mechanisms for digital signage must be perfectly engineered to ensure fast, accurate, and consistent data flow.
This session will be focused on making a data pipeline for digital signage successful. We will discuss available technologies to build a pipeline, testing methodologies, and how to include Drupal in this pipeline.
Key Takeaways:
- Powering digital experiences beyond websites; specifically digital signage
- Evaluating delivery mechanisms like REST and IoT
- Testing with Behat and PHPUnit
- Integrating Drupal into the mix, leveraging capabilities and contrib modules like Workflow, Roles & Permissions, Digital Asset Management etc.
Explore all Srijan webinars: https://www.srijan.net/webinar/past-webinars
[Srijan Wednesday Webinars] New Recipe of Decoupling: Drupal 8, Symfony and S...Srijan Technologies
Speaker - Jyoti Singh
This session shares some lessons learnt from deploying a decoupled architecture solution.
Key Takeaways:
-Understand what is decoupled architecture and its advantages
-Know how to use web services to create a fully decoupled architecture
-Get a hands-on demo of a decoupled architecture in use
PS: To watch the demo session of creating decoupled architecture in use,
visit: https://www.youtube.com/watch?v=Zw42sFgFLVo
Join the webinar to understand how exactly decoupled architecture works and how best to implement it.
View all webinars at: www.srijan.net/webinar/past-webinars
[Srijan Wednesday Webinars] Let’s Take the Best Route - Exploring Drupal 8 Ro...Srijan Technologies
Speaker - Surbhi Sriwal
This session is a deep dive into understanding all the technical aspects of Drupal 8 - specifically the Routing System.
Key Takeaways:
-Understand how Drupal 8 makes use of Symfony’s routing system using yaml and controllers
-Know how is D8 routing is different from D7
-What you can do with the D8 routing system
-Understand the execution precedence of same routes
-Learn how to structure Drupal 8 routes
-Get a hands-on demo of how to define your own routes
Join the webinar to get a better understanding of the Drupal 8 routing system and what it is capable of.
View all webinars at: www.srijan.net/webinar/past-webinars
[Srijan Wednesday Webinars] Is Your Business Ready for GDPRSrijan Technologies
Speaker: Matt Skinner, Head of Digital Strategy and Data, Proctor + Stevenson
The General Data Protection Regulation represents the biggest change to European data laws in decades. It comes into effect on May 25th, 2018, and if you haven’t already chalked out a compliance roadmap, it’s high time you did. The regulation has far-reaching effects and will have a significant impact on any firm that does business in the EU.
This session is designed to give you a complete overview of GDPR and what it entails. Get an understanding of the regulations introduced, and what it means for your business: data security as well as marketing communications. Join the webinar to plan out your seamless transition into GDPR compliance.
Who's This For
- Technology professionals
- Senior marketing professionals
- Anyone working with agencies and clients in the EU, looking to understand the complete impact of GDPR
What's In It for You
- General overview of GDPR, what it means
- Know how enterprises should prepare for it
- Understand its impacts on data collection, websites, and comms
- Review data security and GDPR’s potential long-term impact on the marketing industry
View our complete series of webinars at: www.srijan.net/webinar/past webinars
[Srijan Wednesday Webinars] Artificial Intelligence & the Future of BusinessSrijan Technologies
“AI is the new electricity” – Andrew Ng, former Chief Data Scientist, Baidu
Artificial Intelligence is the new frontier for human evolution. It will upend industries, cause fundamental shifts in processes and jobs, and create unprecedented innovation.The question one wishes to answer is: how and why it impacts industry, and how can it be leveraged by businesses.
This session will introduce AI and machine learning: the process of creating AI, and go on to discuss the key applications of these emerging technologies. We will also dive into a preliminary review of ML algorithms and how they work.
Key Takeaways:
- Define AI and ML, and the philosophy behind these new technologies
- The impact of AI on jobs, communities, business, and industry
- The use cases of AI in different industries like hi-tech, manufacturing, healthcare, publishing and media, education, transportation etc.
-Introduction to machine learning algorithms like classification, regression, neural networks etc.
Check our webinars series and sign up for future webinar notifications at: www.srijan.net/webinar/past-webinars
[Srijan Wednesday Webinars] How to Design a Chatbot that WorksSrijan Technologies
Speaker: Jesus Martin, BEEVA
2016 was supposed to be the year of messaging and also when chatbots would stand alone as the natural replacement for traditional apps. Unfortunately, at the end of 2017 we are still facing unsolved problems.
This session gives a short overview of the chatbot history, from the very beginning to the current state of the art. It also sets expectations about what we can do with chatbots, and explain how to deal with current problems we face when creating a chatbot design that works. Join the webinar to get a complete design framework to building great chatbots.
Key Takeaways:
- Understand the history of chatbots and where we are heading
- Know where are we on the user-chatbot interaction
- Learn what to take into account about chatbot design before writing a single line of code
- Get a complete chatbot design framework
View all our past webinar sessions at: www.srijan.net/webinar/past-webinars
[Srijan Wednesday Webinars] Simplifying Migration to Drupal 8Srijan Technologies
Speaker: Sugandh Khanna, Drupal Developer, Srijan Tchnlogies
Migrating an entire website from a particular CMS, or even from Drupal 7, onto Drupal 8 can look like a huge task. Traditionally, if we decided to move a website to Drupal 8, we created 100 content types, with their 2000 fields or more, and each field had its own settings and properties. This consumed a lot of time and actual development, that genuinely required logic, got delayed.
But with the three contributed modules: migrate_tool, migrate_upgrade, migrate_plus; switching to Drupal 8 has gotten a whole lot easier. In this webinar, we take a look at how to use these modules to eliminate all the tedious work. We also share some the challenges we faced during site migration and how those were resolved. Join the webinar and become a pro at Drupal 8 migrations.
Who Is This For
-Backend Developers
-Site Builders
-Architects
What's In It For You
- Understand different challenges faced while migrating from Drupal 7 to Drupal 8
- Learn about migrate configurations and its workflow from Drupal 7 to Drupal 8.
- Review some common use cases where complex websites with hundreds of content types were successfully migrated.
For more interesting sessions and to join the webinar community, visit: www.srijan.net/webinars
The introduction of Object Oriented Programming in Drupal 8 is an evolution in the world of Drupal which has brought the concept of code reuse and encapsulation, allowing users to build better maintainable and structured code. One of the concepts that contribute to this is Dependency Injection and Services in Drupal
Is there a way for someone to modify the process by which Drupal invokes modules without making changes to the core function in Drupal 7? Or is there a better way to access the global variables without calling them directly in Drupal 7? The answer is “No”. This session aims at understanding the dependency injection and services in Drupal 8, that may be a bit complex but are really usable.
[Srijan Wednesday Webinar] Leveraging the OGD Platform and Visualization EngineSrijan Technologies
Data is one of the most valuable resources of modern digitized governance, but raw data alone can not provide the decision makers valuable insights. To turn the numbers into knowledge, we need to separate noise from the data. We also need to choose the right way to present the data, so that it’s easily interpreted.
There Open Government Data Platform India makes a lot of valuable open government datasets available from different sectors. And you are free to leverage these for creating visualizations and info-graphics using the in-house visualization engine.
Watch the webinar and learn how the OGD platform can help you create data-driven products and solutions.
Key Takeaways:
- Understand the importance of visualizations to showcase valuable insights
- Learn how to use open government data in decision making
- Know how to choose your format of visualization according to the data
- Learn how to create and share maps and charts using the Data Visualization Engine of the OGD Platform
Speaker: Ori Bendet, Inbound Product Manager, HPE Software
Today’s testers must test multiple aspects across a plethora of device permutations, in every network condition, while balancing quality with speed of delivery. But there’s no time to test everything. And so, we base our tests on hunches. But hunches can result in not testing key functionalities and/or environments that end up having a devastating effect on quality of the product.
So what’s the answer?
We need to switch from “gut feel” to evidence-based-testing, or simply put, adopt the practice of analytics to drive testing. Join the webinar to learn why and, how to start using analytics for testing your apps.
Who is this for
- Testers
- DevTesters
- Test managers
- Developers
- Project management
- Product Owners
- CIOs
Key takeaways
- What is one of the main problems in today’s testing teams
- What are the risks?
- Examples from our own experiences
- How can you empower your testing by using Analytics
You can view all our past webinars at: www.srijan.net/webinar/past-webinars
[Srijan Wednesday Webinar] Key ingredients of a Powerful Test Automation SystemSrijan Technologies
Speaker : Nitin Mukhija
Test Automation has become a key feature of the Quality Assurance landscape. Automation testing frameworks are crucial for enterprise software development teams because it makes them more efficient. A system that checks your code and executes tests on its own, frees you up to concentrate on other, more important aspects of the development process.
And because this system brings such high value, it’s important to get this right. View the webinar to understand what makes a powerful test automation system, and how to build that for your project.
Who’s This For?
-Developers
-QA folks
-Test Practitioners
What’s In It For You?
-Learn how to design a highly maintainable, configurable system with fast execution and efficient reporting
-How to achieve Continuous Delivery
-Understand how Docker was used to simplify testing at PayU
[Srijan Wednesday Webinar] Building BPMN Web Portals with Camunda and DrupalSrijan Technologies
Speaker: Ishan Mahajan, Program Manager, Srijan Technologies
Enterprises today have multiple teams and several applications working in tandem. In such situations, combining a BPMN workflow engine with your content management system gives you a lot of flexibility in managing tasks, and keeping your teams in sync.
Camunda, an open source, Java-based workflow engine can provide intelligent workflows for large enterprises. And if you are using Drupal as your enterprise CMS, it becomes very easy to design and implement a BPMN web portal that combines these two technologies. Join the webinar for a Drupal-Camunda tutorial that explains how to deploy a Camunda-Drupal connector module, and what are the business benefits for an enterprise.
Who's This For?
- Developers and architects who regularly integrate Drupal with other softwares, within large enterprises.
- Developers and architects who are interested in learning more about Drupal's REST API capabilities and how Drupal is a great fit for creating web portals for backend enterprise software.
- Developers and architects interested in learning about Camunda
What's In It For You?
- Learn why you need a Camunda-Drupal integration
- Understand when to use a Camunda-Drupal integration
- Understand how does a Camunda-Drupal integration actually work, and how to implement it
[Srijan Wednesday Webinar] Decoupled Demystified: The Present & Future of Dr...Srijan Technologies
Speaker: Preston So, Development manager, Acquia Labs
It’s been a little over a year since Drupal 8 was released with RESTful web services available out of the box, but that doesn’t mean that our community hasn’t kept pace with unprecedented progress in the landscape around us. Since November 2015, we’ve released two new minor versions of Drupal 8, each with exciting new features in the core REST API, thanks to the indefatigable team comprising the API-first initiative.
Nonetheless, changes are occurring simultaneously in the wider API landscape which are challenging our perceptions and, accordingly, our approaches. Alternatives to our core REST implementation such as JSON API and GraphQL are quickly gaining steam in the front-end world.
Join the webinar as we delve into what’s changed since the release of Drupal 8 in core web services, how core and Drupal’s wider web services ecosystem will evolve in coming minor versions, and how the API-first initiative is anticipating further evolution in our fast-moving surroundings.
Who's This For?
- Back-end developers
- Front-end developers
- Decoupled application developers
- Architects
- Drupal contributors
What's in it for You?
- Learn about the changes in web services since Drupal 8’s release in 2015
- Understand how the wider context of web services has shifted around us, and how we are working to ensure Drupal remains at the forefront of API-first content management
- Learn how to work with web services solutions in the newest iterations of Drupal 8
- Know how the upcoming releases of Drupal will evolve to ensure Drupal’s web services success
Check out our other webinars at: www.srijan.net/webinars
[Srijan Wednesday Webinars] Automating Visual Regression using ‘Galen’Srijan Technologies
Speaker: Soumyajit Basu, Deepshikha Singh
Responsive web design is all about crafting sites that provide an optimal viewing and interaction experience across different devices. This becomes all the more important in the light of Google boosting the ratings of sites that are mobile friendly if the search was made from a mobile device. This has the net effect of penalizing sites that are not mobile friendly.
In this session, we will discuss the challenges in testing responsive websites, and how to overcome those by using the tools available online. We are going to take a closer look at Galen, and how it can automate responsive web design testing.
Why Galen?
Galen is an open source framework built for responsive websites. It provides the feasibility to test the various pages on screen sizes and browsers. The test and spec files can be written in plain English which makes it easier for the business people to understand and contribute. This can also be used as a guide for the UI developers where they build the layout based on the spec files agreed by the business.
Who's This For?
- Web Developers
- UI/UX developers
- Testers
What's In It For You?
-Understanding the nuances of Responsive Web Design
- Knowing the variety of tools used to test responsive websites
- How to approach Responsive Web Design testing
- What is Galen and how to use it
- Hands-on demo of Galen
So the session slides and other webinars or Test Automation: http://srijan.net/webinar/automating-visual-regression-using-galen
[Srijan Wednesday Webinars] NASA, Netflix, Tinder: Digital Transformation and...Srijan Technologies
Speaker: Daniel Khan, Node.js Technology Lead, Dynatrace
Node.js delivers performance, scalability, and speed of innovation for enterprise applications, and has rapidly taken over as the preferred server-side environment.
Every new technology delivers new possibilities and also new challenges. Join the webinar for a quick introduction to Node.js, and the challenges that come up during enterprise deployments.
Who's This For?
- Developers
- Ops
- Architects
- Anyone interested in getting started with Node.js
What's In It For You?
- Understand what Node.js is
- Find out about the typical use cases for Node.js
- Learn about possible problems and how to make sure that your applications are running smoothly
Explore our other sessions and Join the community: www.srijan.net/webinars
[Srijan Wednesday Webinars] Building a High Performance QA TeamSrijan Technologies
Speaker: Karim Fanadka, HPE Software
Session Slides: http://www.srijan.net/webinar/building-high-performance-qa-team/
Karim is a DevTest manager at HPE Software and his team is responsible for testing their new SaaS product, the StormRunner Load. In this webinar, Karim shares his experience of building a QA team that is agile, efficient, and uses the latest testing frameworks. He will also talk about continuous testing, automation, test based analytics and hotfixes.
Karim start's off the challenges in agile QA and then moves on to solving these challenges. The best part is when he shares the trick to delivering to production every 1.5 months, even for a high pressure enterprise product.
The Q/A session also brings out some very interesting topics, going into greater details and various suggestions that you can implement for your own QA teams.
[Srijan Wednesday Webinar] Mastering Mobile Test Automation with AppiumSrijan Technologies
Speaker: Justin Ison
Check out the complete session slides here: http://www.srijan.net/webinar/mobile-...
This session dives into the history of Appium, and it's pros and cons. The speaker also looks at how to write a good test setup and collect meaningful data points. We look at quick demos and comparisons of how Appium significantly reduces test times.
And you definitely should hang around till the Q&A session, where participants pitch in with their issues and queries. The speaker answers all the questions, sharing additional information and tips on Appium.
Unlocking Productivity: Leveraging the Potential of Copilot in Microsoft 365, a presentation by Christoforos Vlachos, Senior Solutions Manager – Modern Workplace, Uni Systems
Epistemic Interaction - tuning interfaces to provide information for AI supportAlan Dix
Paper presented at SYNERGY workshop at AVI 2024, Genoa, Italy. 3rd June 2024
https://alandix.com/academic/papers/synergy2024-epistemic/
As machine learning integrates deeper into human-computer interactions, the concept of epistemic interaction emerges, aiming to refine these interactions to enhance system adaptability. This approach encourages minor, intentional adjustments in user behaviour to enrich the data available for system learning. This paper introduces epistemic interaction within the context of human-system communication, illustrating how deliberate interaction design can improve system understanding and adaptation. Through concrete examples, we demonstrate the potential of epistemic interaction to significantly advance human-computer interaction by leveraging intuitive human communication strategies to inform system design and functionality, offering a novel pathway for enriching user-system engagements.
Communications Mining Series - Zero to Hero - Session 1DianaGray10
This session provides introduction to UiPath Communication Mining, importance and platform overview. You will acquire a good understand of the phases in Communication Mining as we go over the platform with you. Topics covered:
• Communication Mining Overview
• Why is it important?
• How can it help today’s business and the benefits
• Phases in Communication Mining
• Demo on Platform overview
• Q/A
PHP Frameworks: I want to break free (IPC Berlin 2024)Ralf Eggert
In this presentation, we examine the challenges and limitations of relying too heavily on PHP frameworks in web development. We discuss the history of PHP and its frameworks to understand how this dependence has evolved. The focus will be on providing concrete tips and strategies to reduce reliance on these frameworks, based on real-world examples and practical considerations. The goal is to equip developers with the skills and knowledge to create more flexible and future-proof web applications. We'll explore the importance of maintaining autonomy in a rapidly changing tech landscape and how to make informed decisions in PHP development.
This talk is aimed at encouraging a more independent approach to using PHP frameworks, moving towards a more flexible and future-proof approach to PHP development.
Removing Uninteresting Bytes in Software FuzzingAftab Hussain
Imagine a world where software fuzzing, the process of mutating bytes in test seeds to uncover hidden and erroneous program behaviors, becomes faster and more effective. A lot depends on the initial seeds, which can significantly dictate the trajectory of a fuzzing campaign, particularly in terms of how long it takes to uncover interesting behaviour in your code. We introduce DIAR, a technique designed to speedup fuzzing campaigns by pinpointing and eliminating those uninteresting bytes in the seeds. Picture this: instead of wasting valuable resources on meaningless mutations in large, bloated seeds, DIAR removes the unnecessary bytes, streamlining the entire process.
In this work, we equipped AFL, a popular fuzzer, with DIAR and examined two critical Linux libraries -- Libxml's xmllint, a tool for parsing xml documents, and Binutil's readelf, an essential debugging and security analysis command-line tool used to display detailed information about ELF (Executable and Linkable Format). Our preliminary results show that AFL+DIAR does not only discover new paths more quickly but also achieves higher coverage overall. This work thus showcases how starting with lean and optimized seeds can lead to faster, more comprehensive fuzzing campaigns -- and DIAR helps you find such seeds.
- These are slides of the talk given at IEEE International Conference on Software Testing Verification and Validation Workshop, ICSTW 2022.
Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...James Anderson
Effective Application Security in Software Delivery lifecycle using Deployment Firewall and DBOM
The modern software delivery process (or the CI/CD process) includes many tools, distributed teams, open-source code, and cloud platforms. Constant focus on speed to release software to market, along with the traditional slow and manual security checks has caused gaps in continuous security as an important piece in the software supply chain. Today organizations feel more susceptible to external and internal cyber threats due to the vast attack surface in their applications supply chain and the lack of end-to-end governance and risk management.
The software team must secure its software delivery process to avoid vulnerability and security breaches. This needs to be achieved with existing tool chains and without extensive rework of the delivery processes. This talk will present strategies and techniques for providing visibility into the true risk of the existing vulnerabilities, preventing the introduction of security issues in the software, resolving vulnerabilities in production environments quickly, and capturing the deployment bill of materials (DBOM).
Speakers:
Bob Boule
Robert Boule is a technology enthusiast with PASSION for technology and making things work along with a knack for helping others understand how things work. He comes with around 20 years of solution engineering experience in application security, software continuous delivery, and SaaS platforms. He is known for his dynamic presentations in CI/CD and application security integrated in software delivery lifecycle.
Gopinath Rebala
Gopinath Rebala is the CTO of OpsMx, where he has overall responsibility for the machine learning and data processing architectures for Secure Software Delivery. Gopi also has a strong connection with our customers, leading design and architecture for strategic implementations. Gopi is a frequent speaker and well-known leader in continuous delivery and integrating security into software delivery.
Transcript: Selling digital books in 2024: Insights from industry leaders - T...BookNet Canada
The publishing industry has been selling digital audiobooks and ebooks for over a decade and has found its groove. What’s changed? What has stayed the same? Where do we go from here? Join a group of leading sales peers from across the industry for a conversation about the lessons learned since the popularization of digital books, best practices, digital book supply chain management, and more.
Link to video recording: https://bnctechforum.ca/sessions/selling-digital-books-in-2024-insights-from-industry-leaders/
Presented by BookNet Canada on May 28, 2024, with support from the Department of Canadian Heritage.
LF Energy Webinar: Electrical Grid Modelling and Simulation Through PowSyBl -...DanBrown980551
Do you want to learn how to model and simulate an electrical network from scratch in under an hour?
Then welcome to this PowSyBl workshop, hosted by Rte, the French Transmission System Operator (TSO)!
During the webinar, you will discover the PowSyBl ecosystem as well as handle and study an electrical network through an interactive Python notebook.
PowSyBl is an open source project hosted by LF Energy, which offers a comprehensive set of features for electrical grid modelling and simulation. Among other advanced features, PowSyBl provides:
- A fully editable and extendable library for grid component modelling;
- Visualization tools to display your network;
- Grid simulation tools, such as power flows, security analyses (with or without remedial actions) and sensitivity analyses;
The framework is mostly written in Java, with a Python binding so that Python developers can access PowSyBl functionalities as well.
What you will learn during the webinar:
- For beginners: discover PowSyBl's functionalities through a quick general presentation and the notebook, without needing any expert coding skills;
- For advanced developers: master the skills to efficiently apply PowSyBl functionalities to your real-world scenarios.
GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...James Anderson
Effective Application Security in Software Delivery lifecycle using Deployment Firewall and DBOM
The modern software delivery process (or the CI/CD process) includes many tools, distributed teams, open-source code, and cloud platforms. Constant focus on speed to release software to market, along with the traditional slow and manual security checks has caused gaps in continuous security as an important piece in the software supply chain. Today organizations feel more susceptible to external and internal cyber threats due to the vast attack surface in their applications supply chain and the lack of end-to-end governance and risk management.
The software team must secure its software delivery process to avoid vulnerability and security breaches. This needs to be achieved with existing tool chains and without extensive rework of the delivery processes. This talk will present strategies and techniques for providing visibility into the true risk of the existing vulnerabilities, preventing the introduction of security issues in the software, resolving vulnerabilities in production environments quickly, and capturing the deployment bill of materials (DBOM).
Speakers:
Bob Boule
Robert Boule is a technology enthusiast with PASSION for technology and making things work along with a knack for helping others understand how things work. He comes with around 20 years of solution engineering experience in application security, software continuous delivery, and SaaS platforms. He is known for his dynamic presentations in CI/CD and application security integrated in software delivery lifecycle.
Gopinath Rebala
Gopinath Rebala is the CTO of OpsMx, where he has overall responsibility for the machine learning and data processing architectures for Secure Software Delivery. Gopi also has a strong connection with our customers, leading design and architecture for strategic implementations. Gopi is a frequent speaker and well-known leader in continuous delivery and integrating security into software delivery.
Pushing the limits of ePRTC: 100ns holdover for 100 daysAdtran
At WSTS 2024, Alon Stern explored the topic of parametric holdover and explained how recent research findings can be implemented in real-world PNT networks to achieve 100 nanoseconds of accuracy for up to 100 days.
DevOps and Testing slides at DASA ConnectKari Kakkonen
My and Rik Marselis slides at 30.5.2024 DASA Connect conference. We discuss about what is testing, then what is agile testing and finally what is Testing in DevOps. Finally we had lovely workshop with the participants trying to find out different ways to think about quality and testing in different parts of the DevOps infinity loop.
GridMate - End to end testing is a critical piece to ensure quality and avoid...ThomasParaiso2
End to end testing is a critical piece to ensure quality and avoid regressions. In this session, we share our journey building an E2E testing pipeline for GridMate components (LWC and Aura) using Cypress, JSForce, FakerJS…
In his public lecture, Christian Timmerer provides insights into the fascinating history of video streaming, starting from its humble beginnings before YouTube to the groundbreaking technologies that now dominate platforms like Netflix and ORF ON. Timmerer also presents provocative contributions of his own that have significantly influenced the industry. He concludes by looking at future challenges and invites the audience to join in a discussion.
Sudheer Mechineni, Head of Application Frameworks, Standard Chartered Bank
Discover how Standard Chartered Bank harnessed the power of Neo4j to transform complex data access challenges into a dynamic, scalable graph database solution. This keynote will cover their journey from initial adoption to deploying a fully automated, enterprise-grade causal cluster, highlighting key strategies for modelling organisational changes and ensuring robust disaster recovery. Learn how these innovations have not only enhanced Standard Chartered Bank’s data infrastructure but also positioned them as pioneers in the banking sector’s adoption of graph technology.
GraphRAG is All You need? LLM & Knowledge GraphGuy Korland
Guy Korland, CEO and Co-founder of FalkorDB, will review two articles on the integration of language models with knowledge graphs.
1. Unifying Large Language Models and Knowledge Graphs: A Roadmap.
https://arxiv.org/abs/2306.08302
2. Microsoft Research's GraphRAG paper and a review paper on various uses of knowledge graphs:
https://www.microsoft.com/en-us/research/blog/graphrag-unlocking-llm-discovery-on-narrative-private-data/
1. Agile SCRUM process at Srijan
Setting up and engaging an Agile Team
Processes and Contracting methodology followed at Srijan
Table of Contents
1. Agile Development Methodology ................................................................................................ 3
1.1 Advantages of an Agile-SCRUM development process ........................................................ 3
2. Constitution of a SCRUM Team .................................................................................................. 4
2.1 Cross-functional team .......................................................................................................... 5
3. Process ...................................................................................................................................... 6
3.1 Analysis and Design Phase .................................................................................................. 6
3.2 UI Design stage ................................................................................................................... 8
3.3 “Sprint 0” / Requirements Sprint ........................................................................................... 9
3.4 Daily SCRUM meetings ....................................................................................................... 9
3.5 Philosophy of DONE-DONE (Definition of DONE) ............................................................. 10
3.6 Sprint-End Demo ................................................................................................................ 11
4. Managing Distributed Teams | Communication Process ........................................................... 12
5. Creating an Agile Engagement ................................................................................................. 13
5.1 Importance of “Product Owner” role ................................................................................... 13
5.2 Trust ................................................................................................................................... 13
5.3 Staffing the Scrum team ..................................................................................................... 13
5.4 Using a Sprint to define an SOW ....................................................................................... 13
THIS DOCUMENT IS CONFIDENTIAL AND PROPRIETARY Page 1 of 14
“Content Management Specialists”
Srijan Technologies Pvt Ltd | 303 Solitaire Plaza, MG Road, Gurgaon-122001, India
Sales : www.srijan.in | +91 124 4849300
2. Agile SCRUM process at Srijan
Document change log:
Revision Date Notes Author
1.0 27 January First complete version of document Rahul Dewan
2012
1.1 21 February Nature of changes: Major Rahul Dewan
2012
1. Added note about “definition of done” to
change/evolve based on project specifics
2. Added note on “Sprint-End Demos” about doign
demos on Tue-Wed-Thurs and reasoning for it
3. Added a heading for Agile Contracts
4. Re-done the structure of the document
5. Added a note about cross-functional teams
1.2 22 February 1. Added the “Agile Engagement Model” heading Rahul Dewan
2012
2. Added various edits/recommendations by Krishnan N
management team
THIS DOCUMENT IS CONFIDENTIAL AND PROPRIETARY Page 2 of 14
“Content Management Specialists”
Srijan Technologies Pvt Ltd | 303 Solitaire Plaza, MG Road, Gurgaon-122001, India
Sales : www.srijan.in | +91 124 4849300
3. Agile SCRUM process at Srijan
1. Agile Development Methodology
Srijan follows a SCRUM and XP development process for delivering projects internally. Here's
what it means for you.
1.1 Advantages of an Agile-SCRUM development process
1. Greater Visibility : Nearly every 2 weeks there is a delivery, which is DONE-DONE state
(see “Process” below for more details)
2. Deeper client engagement : Product Owner role to be filled by client (supported by a
development-side Project / Account Manager doubling up)
3. Higher quality; less waste/repeat work
i. this happens naturally, as features most-required are prioritised well, thus ensuring that
there are no/little features built into systems which are not going to be used)
ii. all sprint-end work is DONE-DONE; which means it is tested and ready to be released
(please see “Definition of Done” below for more detail
4. Stronger, more communicative teams --> better team morale --> openness to receiving
feedback --> more client respect --> happier teams --> better software
THIS DOCUMENT IS CONFIDENTIAL AND PROPRIETARY Page 3 of 14
“Content Management Specialists”
Srijan Technologies Pvt Ltd | 303 Solitaire Plaza, MG Road, Gurgaon-122001, India
Sales : www.srijan.in | +91 124 4849300
4. Agile SCRUM process at Srijan
2. Constitution of a SCRUM Team
A SCRUM team is made up of the following roles and profiles, representing both the client and the
development partners.
Role Responsibility
Product Owner 1. Owns and communicates the product vision
2. Defines and prioritizes features for development sprints
and release
3. Adjusts features and priorities for each development
sprint, as needed (with inputs from internal stakeholders
at client's end)
4. Decides on release dates consisting of sprints
5. Constantly builds the Product Backlog
6. Participates in Stand-up meetings; ideally “daily” (which if
is not possible, then an internal management function
person – such as an Account/Projects Manager from
Srijan facilitates/fills this role for the daily stand-up
meetings)
7. Takes demos from the team on the Sprint cycle end-date
8. Accepts (or Rejects) deliverables of each sprint
SCRUM Manager 1. Works closely with Product Owner in managing the
Product Backlog (entering User Stories; gathering
requirements)
2. Estimates new items entered in Product Backlog from a
high level
3. Gathers and details requirements for the upcoming sprint
to ensure facilitation of next sprint goals and ensuring
high level of team occupancy
4. Commits to next sprint goals
5. Primary person responsible for day-to-day communication
with the Product Owner
6. Conducts “daily” stand-up meetings; facilitates
conversations among team members for
◦ tasks done since last meeting
◦ plan for today
THIS DOCUMENT IS CONFIDENTIAL AND PROPRIETARY Page 4 of 14
“Content Management Specialists”
Srijan Technologies Pvt Ltd | 303 Solitaire Plaza, MG Road, Gurgaon-122001, India
Sales : www.srijan.in | +91 124 4849300
5. Agile SCRUM process at Srijan
Role Responsibility
◦ roadblocks? accelerators?
7. Facilitates (sometimes, leads) sprint-end demos
8. Conducts the Sprint learning retrospective meetings
among team members
9. Facilitates deployment of Releases on Staging/
Deployment environment
10. Focuses in improving productivity
11. Discusses roadblocks, task complexities, change
requests with Product Owner; Re-negotiates Sprint goals
with Product Owner, as needed
Development Team 1. Typically about 3-4 people (developers, front-end
engineers, QA engineers)
2. Self-organises; Each one asks these questions to each
other every day
◦ What was done yesterday?
◦ What will be done today?
◦ Any challenges/roadblocks?
2.1 Cross-functional team
A key aspect of an Agile development team is that such teams necessarily have to be “cross-
functional”.
This means that when the team is staffed it has all competencies to handle the project, be it
databases, coding (with project relevant technologies), theming, performance, business skills, etc.
THIS DOCUMENT IS CONFIDENTIAL AND PROPRIETARY Page 5 of 14
“Content Management Specialists”
Srijan Technologies Pvt Ltd | 303 Solitaire Plaza, MG Road, Gurgaon-122001, India
Sales : www.srijan.in | +91 124 4849300
6. Agile SCRUM process at Srijan
3. Process
3.1 Analysis and Design Phase
1. Post-award of the project the Product Owner and SCRUM Master work closely together in
defining the Product Backlog with (high-level) User Stories; a sample of user-stories is
given below
2. We would setup the site on our Dev and Staging servers on Acquia's Dev Cloud OR on
Srijan's environment OR the client's dev-staging environment as the project demands.
Some advantages of using the Acquia Dev-Staging environment are:
i. Drupal-ready environment: Fine-tuned hosting environment for Drupal websites;
ideally meant for developers; but can host low-traffic sites as well
ii. Launch readiness analysis: offers real-time inputs from SEO, Security, similar
standpoints defining launch readiness
iii. Real-time analysis the website code and configuration settings to help maximize
performance and security.
iv. Drupal code analysis: logs code modifications to quickly identify and resolve code-
level issues, during maintenance
3. Prepare brief architecture document, as needed
4. In case of a UI Design exercise required, that goes on in parallel. An output in the forms of
Photoshop files (PSDs) is what is delivered as an input to the Scrum Team.
5. User Stories : we prefer a rule of having user-stories of being less than 2 days of work. If
they are bigger, we try and break them down into sub-stories
THIS DOCUMENT IS CONFIDENTIAL AND PROPRIETARY Page 6 of 14
“Content Management Specialists”
Srijan Technologies Pvt Ltd | 303 Solitaire Plaza, MG Road, Gurgaon-122001, India
Sales : www.srijan.in | +91 124 4849300
7. Proposal for online benchmarking tool for NTEN
Sample “user stories” as they appear in a Product Backlog
THIS DOCUMENT IS CONFIDENTIAL AND PROPRIETARY Page 7 of 14
“Content Management Specialists”
Srijan Technologies Pvt Ltd | 303 Solitaire Plaza, MG Road, Gurgaon-122001, India
Sales : www.srijan.in | +91 124 4849300
8. Agile SCRUM process at Srijan
3.2 UI Design stage
1. Srijan engages with our design partners www.designroute.in, www.icdindia.com or
www.dolka.com for this design process.
2. Clients are free to choose the design company from among Srijan's partners, or choose an
agency on their own, based on their internal evaluation
3. This is typically a fixed-cost effort (please see costing table for details)
4. For projects which require UI Design, atleast 1 wireframe sprint needs to be done before
development (Sprint1) starts; this can coincide with Sprint “0”
5. This is estimated to be of 2-3 weeks with close interactions with design team
6. A one-page style guide will be created to identify the various header styles, link styles,
bullets, etc. This will be utilized in theming and when creating custom WYSIWYG styles.
NOTE: We are happy working with any other design team that the client may choose.
Communications and Design is not a core service offering within our portfolio. We're used to
working with partners and agencies from all over the world.
THIS DOCUMENT IS CONFIDENTIAL AND PROPRIETARY Page 8 of 14
“Content Management Specialists”
Srijan Technologies Pvt Ltd | 303 Solitaire Plaza, MG Road, Gurgaon-122001, India
Sales : www.srijan.in | +91 124 4849300
9. Agile SCRUM process at Srijan
3.3 “Sprint 0” / Requirements Sprint
This is a “planning sprint”.
1. The entire product backlog is analysed by the complete SCRUM team.
2. Atleast 3 Sprints are to defined at this stage.
3. Some key complex tasks are identified at this stage.
4. Sprint-1 is planned with 100% requirements gathered for all user-stories identified, and
estimated in detailed
3.4 Daily SCRUM meetings
For each Sprint, a Daily-SCRUM meeting is planned. Here is how a “story-wall”, around which a
SCRUM meeting happens, typically looks in the middle of the Sprint.
THIS DOCUMENT IS CONFIDENTIAL AND PROPRIETARY Page 9 of 14
“Content Management Specialists”
Srijan Technologies Pvt Ltd | 303 Solitaire Plaza, MG Road, Gurgaon-122001, India
Sales : www.srijan.in | +91 124 4849300
10. Agile SCRUM process at Srijan
JIRA Studio and Greenhopper
We also translate all stories, and tasks under each story, into “JIRA
Studio”, and use “Greenhopper” for Task Boarding.
3.5 Philosophy of DONE-DONE (Definition of DONE)
Each story when it moves from the column QA/Review to DONE – needs to be seen through the
following parameters:
1. Code developed as per defined user-story
2. Code peer reviewed & re-factored
3. Unit Tests written wherever necessary and possible
4. Tested – by engineers/development team
5. Documented (just enough)
6. Verified to be bug-free, and approved by QA team
7. Accepted by the Product Owner (client)
8. Feature is ready to be released into the deployment / production environment
For this to happen the Product Owner – from the client side needs to be deeply involved into the
development process, and atleast participate in the project progress several times a week, if not in
Daily Stand-up meetings (due to different time-zones).
Definition of “DONE” (Completed)
THIS DOCUMENT IS CONFIDENTIAL AND PROPRIETARY Page 10 of 14
“Content Management Specialists”
Srijan Technologies Pvt Ltd | 303 Solitaire Plaza, MG Road, Gurgaon-122001, India
Sales : www.srijan.in | +91 124 4849300
11. Agile SCRUM process at Srijan
Do note that this “definition of Done” may vary based on the client engagement
3.6 Sprint-End Demo
Each sprint is typically 2 weeks long, at the end of which there is a “Sprint-end demo”. The
SCRUM Master or another member of the team delivers the demo to the “Product Owner” (client)
and to an extended management team within Srijan (Account Manager, CTO, Business Analyst).
We prefer “Sprint-End Demos” to be held on “Tuesday-Wednesday-Thursday” of the demo week
agreed. This helps the SCRUM team be better planned and not be working weekends (Sat-Sun)
to meet sprint-end goals. The SCRUM Team's objective is to achieve the “definition-of-done”
which is not possible if developers are working remotely from their homes trying to meet
deadlines.
THIS DOCUMENT IS CONFIDENTIAL AND PROPRIETARY Page 11 of 14
“Content Management Specialists”
Srijan Technologies Pvt Ltd | 303 Solitaire Plaza, MG Road, Gurgaon-122001, India
Sales : www.srijan.in | +91 124 4849300
12. Agile SCRUM process at Srijan
4. Managing Distributed Teams | Communication Process
1. It is important for the Product Owner (PO) to be in conversation with the SCRUM team, if
not daily during the Stand-Up meetings, several times a week. Story board screenshots
can be shared on email or Basecamp. The snapshot is also visible on JIRA Studio to
which the PO will have complete access.
2. It is equally important for the entire SCRUM team, including the QA engineers to to be part
of the Daily-Stand-Up meetings
3. Srijan has a distributed Development and Quality team across its 2 offices in Gurgaon
and Dharamshala
4. We conduct our daily stand-up meetings across locations using teleconferencing facility
between our offices. We use http://www.vutelepresence.com/ for this.
5. Phone and Skype calls are always handy and encouraged between all team members.
THIS DOCUMENT IS CONFIDENTIAL AND PROPRIETARY Page 12 of 14
“Content Management Specialists”
Srijan Technologies Pvt Ltd | 303 Solitaire Plaza, MG Road, Gurgaon-122001, India
Sales : www.srijan.in | +91 124 4849300
13. Agile SCRUM process at Srijan
5. Creating an Agile Engagement
5.1 Importance of “Product Owner” role
A client side PO, as it can be observed from the above, is an absolutely imperative role in such
successful project engagements. The ownership of success and failure is with the PO as much as
it is with the Scrum Team.
The Product Owner carries the “vision” of the project, and translates that to the Scrum Team. This
is unlike traditional models of software development, where clients are “receivers of software” after
a certain functionality is achieved, as defiend in functional specifications document.
The evolution of the project, and deliverables every 2-3 weeks is as much the responsibility of the
PO, as it is of the development team.
5.2 Trust
A PO is an integral part of the Scrum Team, and shares the success and failure of sprint-goals
and the project.
To get to this stage, the client must be able to evaluate and gain confidence in the team, and thus
be clear about engaging with this development team.
The pricing methodology of the development team needs to be agreed upon as well.
5.3 Staffing the Scrum team
Apart from the Scrum Master, the development team needs to have the following:
1. Cross-functional people in the team, who can work on different areas of the project –
databases, theming, site building, coding
2. Agile also subscribes that the “entire” development team be part of the project at the
Requirement Gathering sprint as well. However, we at Srijan remain open to staffing the
team differently, in different phases of the project, if costs do not permit a full-team
engagement.
3. While Agile subscribes to the philosophy that the developers must “test for software quality”
themselves – this does not work in our experience in India. Therefore, we recommended
QA engineers to be part of a Scrum Team. QA does not have to be a 100% function, and
therefore can be based on need. We recommend atleast 30% QA Engineer time be built
into each Sprint-cycle
5.4 Using a Sprint to define an SOW
In an Agile team engagement, it helps to use the first sprint of the project to create this SOW.
During an SOW sprint, the two parties can define the high-level business problem or opportunity,
assemble a team, write the beginnings of a product backlog, define roles and responsibilities, and
create high-level estimates. The first SOW itself is the output (or sprint goal).
THIS DOCUMENT IS CONFIDENTIAL AND PROPRIETARY Page 13 of 14
“Content Management Specialists”
Srijan Technologies Pvt Ltd | 303 Solitaire Plaza, MG Road, Gurgaon-122001, India
Sales : www.srijan.in | +91 124 4849300
14. Agile SCRUM process at Srijan
More on creating SOW sprints at: http://www.agilejournal.com/articles/columns/column-
articles/6419-five-steps-to-creating-effective-agile-contracts
THIS DOCUMENT IS CONFIDENTIAL AND PROPRIETARY Page 14 of 14
“Content Management Specialists”
Srijan Technologies Pvt Ltd | 303 Solitaire Plaza, MG Road, Gurgaon-122001, India
Sales : www.srijan.in | +91 124 4849300