All Things Quality & Security

RCPTT, With a Hint of Cucumber

Automated UI Testing is always a challenge. User Acceptance Tests involving domain knowledge and particular conditions are often hard to test and even harder to fully automate.
The RCP Testing Tool (RCPTT) allows to simulate end to end user tests of the whole system, including the UI. Use cases are automated and can be repeated without involvement of actual users or testers. RCPTT enables test automation of UI tests for Eclipse plugins and Eclipse RCP based applications. In a nutshell RCPTT is like Selenium for Eclipse desktop applications.

Experience level:

Beginner

All Things Quality & Security

Application Hardening for MicroProfile and Jakarta EE

Jamie Coleman (IBM)

Steve Poole

In these times of rising cyber attacks it’s imperative that every developer understands the basics about secure software design. In this session we’ll examine how attacks can happen and how you should use your Java and MicroProfile skills to counter the threat.

We will take you from the theory of attacks through to the code and configuration that helps defend against them. With both general advice and specific guidance this talk will help you become better prepared to deal with the new realities of cybercrime.

Experience level:

Beginner

All Things Quality & Security

Challenges and perils of testing database manipulation code

Csaba Nagy (Software Institute - USI, Lugano)

Do you have tests for your database manipulation code? We know the answer. Developers face many challenges. Do integration or unit tests need to be written? Should mocks be implemented or an in-memory database be used? How should a database be reset or repopulated between tests? These are only a few examples. We briefly introduce an Eclipse plugin to analyze database manipulation code and we show examples of interesting prevalent problems in testing this critical code.

Experience level:

Beginner

All Things Quality & Security

Don't Be A Stupid Developer: How To Avoid Basic Cybersecurity Mistakes

Tino Sokic (Company CNV-IBIS, LLC, owner, Information Security Professional)

Please give us a detailed overview of your session and why attendees will be excited to hear about it.

Everyone are hiding behind big words, and in my talk I am trying to put things in the right perspective by calling the actions and events by their real name.

Experience level:

Intermediate

All Things Quality & Security

7 Best practices to fight longer test cycles

mamatha jv (IBM)

We all know that longer test cycles are of a major concern in this fast growing software industry. Then how about shortening them? If we shorten we may loose quality!
Come to this session to learn few best practices that can applied in your testing to overcome them without compromising on the quality.
This session will address challenges in test submissions, selecting tests, triaging failures and many other which contribute for longer test cycles.

Experience level:

Intermediate

All Things Quality & Security

What goes into creating a high-quality Operating System?

Amit Kucheria (Self-employed)

Imagine a small team working on an embedded device - it could be a simple light bulb, a security alarm, a set top box or an internet gateway. Their mission is to ship their application on this device. Typically, this team juggles their time between implementing their core application with bringing up a BSP, cobbling together an OTA solution to allow future updates, managing their CI pipeline and “implementing security”.

Experience level:

Intermediate

All Things Quality & Security

Log4J, SpringShell and all that Jazz (or why bad things can happen to good software)

Steve Poole

Meet the new, nastier brother of cyber crime: Cyberwarfare, It changes everything about how and why our software is attacked. This session will educate you on what's happening, why we're heading for a new reality of constant and sophisticated software supply chain attacks and what Log4Shell and others teach us about why our attitudes and approach to security must change

Experience level:

Beginner

All Things Quality & Security

Intelligent Testing Platform

Geetha Karna (IBM)

Future-proof your Testing with Machine Learning Drive innovation by empowering your teams with end-to-end tests that self-heal and run at-scale in the cloud. Speed up development, lower costs, and improve quality in CI/CD environments. Avoid wasting time fixing broken test cycle. You can dynamically update your tests using machine learning to keep up with product changes. Quickly diagnose test failures with suggestions. Also achieve adaptive execution at scale by running as many test cycles as often needed.

Experience level:

Beginner

All Things Quality & Security

Is your open source project doing what it promised?

Luca Favaretto (Kalpa S.r.l.)

How does a testing team approach an Open Source project? There are two ways to do it: a reactive and a proactive approach.
In this talk we would like to present our proactive approach executed in the Oniro project and the beneficial effects that this approach gives to the product. We will compare this methodology with the reactive one and how it will improve the overall project quality.
This talk shall target Project Managers, Team Leaders and V&V People.

Experience level:

Intermediate

All Things Quality & Security

Demystifying Software Agility vs Product Stability Trade-off: Shift-left to boost Delivery velocity

Edward VCP (Goldman Sachs Group, Inc.)

The bimodal theory of needing to choose between speed and stability has been long-standing in the Software Industry. However this has now been debunked with sufficient evidence, spelling out clearly and concisely that speed actually relies heavily on stability. DevOps metrics directly correlate to the performance, productivity and business value delivered by a team. Cycle time, code quality, CI/CD pipeline stability, coverage, vulnerabilities, incidents, Mean Time to recover(MTTR) et al, to name a few, are industry-proven indicators of the overall product health.

Experience level:

Beginner

All Things Quality & Security