Online Study Group Forming for the ISTQB Advanced Security Tester Certification

I am forming an online virtual study group for people who wish to prepare for and take the new ISTQB Advanced Security Tester Certification. The exam has been in place since March of 2016, but the missing piece has been training courses.

I am working hard to finish my course in both live and e-learning formats. My plan is to have a beta version of the e-Learning course available in mid-November. This beta version will not be accredited because that process takes several weeks. However, the official release version will be accredited.

I know there are people that would like to start studying for this certification now. For that reason, I am forming this online virtual study group that also includes access to the e-Learning content as it is completed.

The cost of the exam ($200) is not included in the price of the course.

Also, please note there are two pre-requisites to sit for the exam:

1. You must hold the CTFL or equivalent
2. You must have 3 or greater years experience in software testing or a related field.

Security testing experience is not required.

Here’s How it Works:

We will meet weekly for one hour in a web meeting format. I will lead the meeting, but the purpose is to answer your questions and provide additional insights to the topics. We will cover sample exam questions. The exact day and time of the meetings may vary, but my plan is to hold the meetings on Wednesday around noon, Central time. There may be times when I either must reschedule or have a fill-in facilitator.

There are 11 sessions, including the kick-off session. Tentative start date is Thursday, Nov. 17th, with a goal end date of January 25th. That may sound like a long time, but with e-Learning courses, most people take several months to complete the advanced courses.

If you can’t attend a meeting, that’s fine. We will record each meeting so you will be able to watch and listen later if you like. You can also send me your questions and feedback by e-mail and I will be happy to respond. You also have phone access to me to ask questions.

If you join after the official start date, that’s fine too. Each chapter of the syllabus stands on its own. While it is optimal to start at Chapter 1, you can either catch-up with the recorded modules, or “wrap around” in the next study group (provided there is enough interest in a second group.)

You will have access to all the e-Learning content I have produced to date. This includes narrated slide shows, course notes, exercises and solutions, as well as the ISTQB sample exam questions.

As I continue to add new content, you will have first access to it. However, I expect that all the content will be in place by the second week of the study group.

Each week, we will focus on a chapter in the syllabus. In two chapters, there will be two weeks each, due to the amount of materials. The time required to view the pre-recorded lessons will be about 2 hours per week. The exercises will require another 1.5 to 2 hours.

You will have access to other attendees to get their thoughts as well. The group and course are housed in my e-Learning Management System with forums so you can freely post ideas and questions.

You will get personal attention and mentoring from me. I expect this group will be 12 – 15 people or fewer people in size.

After the group ends, you still have access to the e-Learning course. This is helpful for review before you sit for the exam.

You have direct access to the person who chaired the development of the syllabus. I can provide context and input that is not in the syllabus or the course. And I can answer your “why” questions.

At any time you feel the group is too much for you to handle time-wise, you always have the option to continue on your own through the e-Learning modules. You still have access to me to ask any questions. In fact, you can still attend the weekly sessions. However, without doing with weekly preparation, you may feel a little disconnected.

Financial Details

The price for the full 11-week study group is $795. The cost of the exam ($200) is not included in the price of the study group.

Payment is in advance and can be made by major credit cards (Visa, MasterCard, Amex and Discover). We also accept PayPal and company checks.

How to Get Started
br /> You can register and pay at https://www.mysoftwaretesting.com/ISTQB_Advanced_Security_Tester_Study_Group_p/advsecgrp.htm

Access instructions will be sent in advance of the first session.
le="font-family: "arial" , "helvetica" , sans-serif;">Questions?

Just contact me here
Tentative Schedule and Topics

1. Thursday, Nov. 17, 12:00 p.m. - 1:00 CST - Kick-off
2. Wednesday, Nov. 23, 12:00 p.m. - 1:00 CST - Review and Discussion of Module 1 (Basis of Security Testing)
3. Thursday, Dec 1, 12:00 p.m. - 1:00 CST - Review and Discussion of Module 2 (Security Testing Purposes, Goals and Strategies)
4. Thursday, Dec 8, 12:00 p.m. - 1:00 CST - Review and Discussion of Module 3 (Security Testing Processes)
5. Thursday, Dec 15, 12:00 p.m. - 1:00 CST - Review and Discussion of Module 4 (Security Testing Through the Lifecycle, Part 1)
6. Thursday, Dec 22, 12:00 p.m. - 1:00 CST - Review and Discussion of Module 4 (Security Testing Through the Lifecycle, Part 2)
7. Thursday, Dec 29, 12:00 p.m. - 1:00 CST - Review and Discussion of Module 5 (Testing Security Mechanisms, Part 1)
8. Wednesday, Jan 4, 12:00 p.m. - 1:00 CST - Review and Discussion of Module 5 (Testing Security Mechanisms, Part 2)
9. Thursday, Jan 12, 12:00 p.m. - 1:00 CST - Review and Discussion of Module 6 (Human Factors in Security Testing)
10. Thursday, Jan 19, 12:00 p.m. - 1:00 CST - Review and Discussion of Modules 7 and 8 (Security Test Reporting, Security Test Tools)
11. Thursday, Dec 26, 12:00 p.m. - 1:00 CST - Review and Discussion of Module 9 (Standards and Industry Trends), Summary and Final Exam Tips

ISTQB Advanced Security Tester Course Coming Soon!

A question I am asked often by people interested in the new ISTQB Advanced Security Tester certification is "When will courses be ready?"

I am excited to announce my course will be available soon in beta format - both live in-house and e-learning formats. I do not have an exact date at this time for the beta release, but I am looking at mid-November.

Since this is a beta version, the course will not be accredited initially. The plans are to have accreditation by the end of 2016. However, as chair of the ISTQB Advanced Security Tester Syllabus working party, I think I have a pretty good grip on the material.

The live course is 4 days in length and is a 50/50 mix of presentation and exercises. The e-learning course has the same content and exercises as the live course.

Here is the link to the course description: http://www.riceconsulting.com/home/index.php/Security-Testing/istqb-advanced-security-tester-course.html

If you are interested in the course or have any questions, either as an individual or as a company, please contact me through the contact form on my website: http://www.riceconsulting.com/home/index.php/component/com_formmaker/Itemid,453/id,1/view,formmaker/

I am taking course bookings for December and forward into 2017. I expect this to be a popular course, so act early to get your spot on my calendar. I will be the main instructor for the course.

Happy Labor Day and The Software Quality Perspective

I hope you are having a great week. Me? I'm looking forward to a weekend Labor Day holiday with family and friends. To kick it off, I'm getting a cavity filled tomorrow!

For those of us in the USA, the Labor Day holiday is to commemorate the contributions of working people and labor unions. Since I have worked in IT most of my working years, I have never belonged to a union, so I'll just speak briefly here to the work ethic in software quality. However, I think much of this could apply to other fields as well.

Like you, perhaps, I have been on projects that required extreme effort and commitment to complete. Even then, some of the projects failed.

Over my 25+ years in software testing consulting, I have heard people complain about how difficult some tasks can become. My reply is something along the lines of, "Yes, that why we call it work."

I have also worked for managers that were totally clueless when it came to how to treat people. These managers expected 100% availability, no allowance for sickness or family emergencies, provided no training or encouragement to the team, and generally created a work environment that was de-motivating in nature. That is the dark side of work, in my opinion.

If I had to capsulize what a person should bring to a project, they would include:

• Motivation - Passion for the job
• Skills - Knowing how to do the job, and continuously learning new skills
• Creativity - Being able to do things differently and better
• Problem solving - So that the team lead doesn't have to do everything
• Integrity - Doing the right thing when no one is looking
• Caring - For the quality of work performed, and for the welfare of others
• Vision - To see the big picture of what they are doing
• Calling - To know why they are doing what they are doing
• Respect - For others, for other people's ideas, for leaders

You might have other things that would fit well on the list. By the way, my two favorite books on this topic are "Peopleware" by DeMarco and Lister, and "The Mythical Man-Month" by Fred Brooks.

So, relax this weekend and enjoy the fruit of your labor. Ironically, some people will not be able to do that. They will be working. This normally includes law enforcement, military, medical professionals, broadcasters, and people working tech support, food service and retail. I salute those fine people and wish them safety in what they do.

Recording and Slides From Today's Webinar on Decision Tables

Thanks to everyone that attended today's webinar on decision tables. For those that could not get in
due to capacity limits, I apologize.

However, here are the slides:
http://www.riceconsulting.com/public_pdf/Webinar_Decision_Tables.pdf

And here is the recording:
https://youtu.be/z5RlCBKxfF4

I am happy to answer any questions by e-mail, phone or Skype. If you want to arrange a session, my contact info is on the final slide.

Thanks again,

Randy

Lessons Learned in Test Automation Through Sudoku

For many years, I have recommended Sudoku as a mind training game for testers. I think Sudoku requires some of the same thinking skills that testers need, such as the ability to eliminate invalid possibilities, deduce correct answers and so forth.

Much like an application that may lack documentation, Sudoku only gives you a partial solution and you have to fill in the rest. Unlike software, however, guessing actually prevents you from solving the puzzle - mainly because you don't see the impact of an incorrect guess until it is too late to change it.

My friend, Frank Rowland, developed an Excel spreadsheet some time ago, that he used to help solve Sudoku puzzles by adding macros to identify cells that had only one possible correct value. At the time, I thought that was pretty cool. Of course, you still had to enter one value at a time manually. But I thought it was a good example of using a degree of automation to solve a problem.

Fast forward to last week. I was having lunch with Frank and he whips out his notebook PC and shows me the newest version of the spreadsheet. After listening to a math lecture from The Great Courses, he learned some new approaches for solving Sudoku.

Armed with this new information, Frank was successful in practically automating the solution of a Sudoku puzzle. I say "practically" because at times, some human intervention is required.

Now, I think the spreadsheet is very cool and I think that the approach used to solve the puzzle can also be applied to test automation. The twist is that the automation is not pre-determined as far as the numeric values are concerned. The numbers are derived totally dynamically.

Contrast this with traditional test automation. In the traditional approach to test automation (even keyword-driven), you would be able to place numbers in the cells, but only in a repeatable way - not a dynamic way.

In Franks's approach, the actions are determined based on the previous actions and outcomes. For example, when a block of nine cells are filled, that drives the possible values in related cells. The macros in this case know how to deduce the other possibilities and also can eliminate the invalid possibilities. In this case of "Man vs. Machine", the machine wins big time.

I don't have all the answers and I know that work has been done by others to create this type of dynamic test automation. I just want to present the example and would love to hear your experiences in similar efforts.

I think the traditional view of test automation is limited and fragile. It has helped in establishing repeatable tests for some applications, but the problem is that most applications are too dynamic. This causes the automation to fail. At that point, people often get frustrated and give up.

I've been working with test automation since 1989, so I have seen a lot of ideas come down the pike. I really like the possibilities of test automation with AI.

I hope to get a video posted soon to show more about how this works. Once again, I would also love to hear your feedback.  

ASTQB Mobile Tester Certification - Live Virtual Classes in August and September, 2016

According to a very recent survey published by Techwell, only 25% of respondents felt they had the knowledge/skills and tools needed for testing mobile applications!

That needs to change and I have just the way to do it.

I am launching a new schedule of live virtual training courses for this new certification from the ASTQB, starting August 9 – 11. 

I have been holding off offering this course as a live virtual course until I was 100% positive you would feel fully engaged while taking the course. I have developed a technique that I feel will keep you engaged in the material and prepare you for the exam. (By the way, the exam is not included in the cost of this course but you can add the $150 exam to your registration.)

Also, let me encourage you to keep building new skills in testing. Mobile testing is a great specialty area and it is also a great skill set to have in your career. The time to learn mobile testing is NOW. Don't wait until your employer is looking to build that special team...or (and I hope this never happens in bad way, but...) if you are looking for employment.

I will be the instructor for all presentations of this course. I am a co-author of the ASTQB Mobile Tester syllabus and author of this course. This course is fully accredited by the ASTQB. And...I have been teaching mobile testing since 2001!  You get personal access to me throughout the course and after the course to ask any questions.

This course covers all aspects of mobile testing. More about the live virtual classes can be found here:

http://www.riceconsulting.com/home/index.php/Mobile-Testing/astqb-certified-mobile-tester-live-virtual-course.html

and the course brochure is here:

http://www.riceconsulting.com/home/index.php/Mobile-Testing/testing-mobile-applications-astqb-certification-course.html

In the most recent ASTQB newsletter that was published on Tuesday, I have an offer of 15% off any ASTQB Mobile Testing course – live or e-learning. Just use promo code “MOBILE15” when paying for your registration. This offer is only good through August 15. For more details on this course or to register, please visit http://www.riceconsulting.com/home/index.php/Mobile-Testing/astqb-certified-mobile-tester-live-virtual-course.html

If you want to learn more about the ASTQB Mobile Tester certification, just go to:

https://www.astqb.org/get-certified/steps-to-certification/

I hope to see you there!

Randy

ISTQB Advanced Level Security Tester Certification Officially Available!

I am very excited to announce that the ISTQB Advanced Security Tester certification is officially available. I am the chair of the effort to write the syllabus for this certification. It took us over 5 years to complete this project. We had input from security testers worldwide.

The syllabus is not yet posted on the ASTQB web site, but it will be available there very soon. It will take training providers such as myself a while to create courses and get them accredited, but they will also be out in the marketplace in the coming weeks and months.

Cybersecurity is a very important concern for every person and organization. However, only a small percentage of companies perform continuous security testing to make sure security measures are working as designed. This certification prepares people to work at an advanced level in cybersecurity as security testers. This is a great specialty area for testers looking to branch out into a new field - or to show their knowledge as security testers.

Below is a diagram showing the topics in the certification (click to enlarge):

Slides and Recording from Today's Webinar on the ASTQB Mobile Tester Certification

Thanks to everyone who attended today's webinar. Here are the slides and recording:

http://www.riceconsulting.com/public_pdf/ASTQB%20Mobile%20Certification.pdf

http://www.anymeeting.com/riceconsulting/E952D982824A3A

Coming to Dallas/Ft. Worth - Testing Mobile Applications - ASTQB Certification Course - April 19 - 20, 2016

I hope you can join me for this special course presentation for the new Certified Mobile Tester (CMT) designation from the American Software Testing Qualifications Board.

We will be in the DFW area (Irving, TX) on the dates of Tuesday, April 19 and Wednesday, April 20 at the Holiday Inn Express - 4235 West Airport Freeway, Irving, TX 75062

Seating is limited, so I recommend registering as soon as possible to get your place. (This class size is limited to 15 people.)

To register: https://www.mysoftwaretesting.com/ProductDetails.asp?ProductCode=CMTDFW

About the Course and Certification

In the fall of 2015, the ASTQB (of which I am on the board of directors) felt there was a compelling need for testers to have a robust and meaningful certification focused on testing mobile applications. So, we set about writing a syllabus and exam for that certification. I was honored to contribute as a co-author of the syllabus. At the present, this is a certification only offered by the ASTQB.

To learn more about the certification, see the syllabus and sample exam, just go to:
http://www.astqb.org/get-certified/mobile-tester/

To see the course outline, go to:
http://www.riceconsulting.com/home/index.php/Mobile-Testing/testing-mobile-applications-astqb-certification-course.html

There are no pre-requisites for this certification! While we reference concepts from the ISTQB Foundation Level, everything you need to know is taught in this course.

We have exercises to reinforce key concepts and sample exams after each module to give you a taste of what to expect on the actual exam. You can also bring your own mobile device as a way to perform the exercises, although this is not required.

Costs and Logistics

Cost: $1,500 USD per person, plus exam ($150).

You can attend the course without taking the exam. However, we will be offering a live exam at the end of the 2nd day.

There will also be the option to take the exam later electronically, if you desire. However, we need to know your preference 2 weeks in advance.

This class will be streamed live, so if you want to attend virtually, that is possible. There is a $100 discount for virtual attendees. Virtual attendees in the USA will receive a course notebook in advance of the training and will also have access to the e-learning course at no extra cost.

For teams of 3 or more, there is a 10% discount of the course registration fee. The exams are not discounted.

We will not have breakfast items, however, we will have a light lunch (pizza, sandwiches, etc.) brought in each day. Please let us know if you have any dietary needs or requests.

Important Notice for Those Who Plan to Travel to DFW to Attend

Please do not book any non-refundable travel (air fare, hotel, etc.) until we confirm the class. We make every attempt to not cancel a class, but sometimes this is unavoidable. We make the call about 2 - 3 weeks in advance of the class, or earlier, if possible.

We located this class to be close to the DFW airport for the convenience of those who may be traveling in for the class. The hotel runs a free airport shuttle.

You are responsible for making your own hotel reservations.

If you plan to take the exam on Day 2, the exam will take place from 3:30 p.m. to 4:30 p.m.  Please allow adequate time to catch your flight. The hotel is 6.4 miles from the DFW airport.

Other Questions?

Feel free to call our office with any questions or special needs - 405-691-8075.

Survey Results for the Tester to Developer Ratio - January 2016

For the past month, I have been collecting surveys to see which tester to developer ratios are in use in various organizations. In addition, I asked some other questions about management attitudes toward dealing with testing workloads. I'll publish those results a little later.

This was a small survey of 22 companies worldwide, 19 of which were able to provide accurate information about their tester to developer ratio.

This survey is part of ongoing research I have been conducting since 2000.

Thanks to everyone who has contributed to date.

Before I get into the findings, I want to refer to two articles I have written on this topic. These articles explain why I feel that the data show there is no single ratio that works better than others. Getting the right workload balance is a matter of tuning processes and scope, which includes optimizing testing to get the most efficiency with the resources you have.

You can read these articles at:

The Tester-to-Developer Ratio Revisited

The Elusive Tester to Developer Ratio

The recent findings are:

• The range of ratios are much tighter. The range was 1 tester to 1 developer on the richer end of the scale, to 1 tester to 7 developers on the leaner end. I feel that some of this is due to the small sample size.
• The majority of responses (16) indicated just three ratios: 1 tester to 1 developer on the low side to 1 tester to 3 developers on the high side.
• The most common ratio was 1 tester to 2 developers
• The average was also 1 tester to 2 developers 
• People reported poor, workable and good test effectiveness at all ratios. The variation was wide. There were no noticeable indications that a particular ratio of testers to developers worked any better than another, simply due to the ratio.

This survey showed much richer ratios than any other survey I’ve taken. This could be due to the impact of agile methods. Most of these companies (13) reported they do not anticipate hiring more testers in 2016. I plan to continue this survey to get a more significant sample size.

If you have not contributed to this survey yet, you can still add your responses at:

https://www.surveymonkey.com/r/55LVHFZ

All responses are anonymous.

Thanks!

Randy

Files from Today's Webinar on Intelligent Sampling Using Equivalence Partitioning

Hi all,

Thanks to everyone who made it to today's webinar, Intelligent Sampling Using Equivalence Partitioning.

Here are the slides: http://www.riceconsulting.com/public_pdf/Intelligent Sampling Using Equivalence Partitioning.pdf

Here is the webinar recording: http://www.anymeeting.com/riceconsulting/E951D68780493B

Thanks,

Randy

TestStorming - A Collaborative Approach for Rapid Test Design

Thanks to everyone who attended my webinar today on TestStorming(TM)!

Here is the recorded presentation:

http://www.anymeeting.com/riceconsulting/E951DD88814D3F

Here are the slides: http://www.riceconsulting.com/public_pdf/TestStorming.pdf

Here is the article on my website: http://www.riceconsulting.com/home/index.php/General-Testing-Articles/teststorming-a-collaborative-approach-to-software-test-design.html

And, finally, here is the link to the METS spreadsheets I mentioned today: http://www.gregpaskal.com/mets/

Have a great weekend!

Randy

A Tribute to My Father

-->

In honor of this upcoming Father’s Day here in the USA, I want to pay a special tribute to my dad, Marvin Rice. I’m thankful he is still alive and I am able to visit with him. I know that many people don’t have that blessing.

When my dad was very young he worked in the broomcorn fields of southern Oklahoma. As he grew into adolescence, he showed an aptitude for working with mechanical things, so he helped support his parents and siblings by working on cars. He was drafted into the Army after WWII to go to Japan as part of the rebuilding effort. There, he was a small arms specialist.

When he returned home from Japan, he opened a Texaco station in Chickasha, OK. The building is still standing today.

I got my love of business from my dad. From the age of 8 or 9, I was helping at the service station he leased in Chickasha from Champion Oil Company (that building is still there, too). That station was located in the “bad” part of town, but the early 60’s was a different time in our country, and especially in Chickasha. I remember how the old men, both white and black, would sit around the stove in the station just shooting the bull.

I saw how my dad served people of all races and economic levels the same way. (By the way, gasoline was 19 cents a gallon then!) For those of you too young to remember, there was a time when most gas stations were full-service. Not only did someone else put the gas in your car, but you got your windshield cleaned, your oil checked, hoses and belts checked, and maybe even your tires were checked.

As a kid, I washed a lot of windows and checked a lot of tire pressure!

I saw my dad bounce back from financial setbacks, like the time someone stole all the cash from the day’s business. That would have been roughly $3,000 in today’s money.

He worked long hours, gave good service and had loyal customers because he enjoyed what he did, even though it was hard at times. He was always working to improve himself. I remember early in my life when he took a Dale Carnegie course – a big thing back then. Guess what? I listened to the tapes as well and read the book, “How to Win Friends and Influence People” before I graduated High School and they shaped how I deal with people.

As I got older, Dad became my scoutmaster and I learned lessons of leadership. We also rebuilt two engines! In fact, we are working together right now to restore a 1949 Plymouth that has been in our family for 65 years. That has taught me a lot about problem-solving.

My dad is a man of few words, but I think the thing he told me most often (usually while working on something) is "If a job is worth doing, it's worth doing right." That sure fits into the quality picture, doesn't it?

Much of what you see in the work I do through Rice Consulting Services, is actually a branch off a tree with deep roots of skills, hard work, integrity, creativity, tenacity, and a strong belief in God and Country. I try my best to maintain the standards my dad has in his own life.

It is incredible, but at age ninety, he still works almost daily on sewing machines. He has a steady stream of customers. I find that both inspiring and depressing - inspiring that he still has the energy and desire to still be active and working - depressing that I may have inherited that same gene.

As I look at my two sons, both fathers, one a software tester and one an auto technician, I see his legacy forming in their lives as well and it makes me proud.

That’s what this posting is really about. Not just buying your father a card and gift for Father’s Day, but if you are able, to tell him what he has handed down to you in your life. Too many times we remember the disagreements or strife, but there were likely good times in there as well. How has he shaped your life? What is his legacy? I’ll bet if you tell him how he helped to shape your life, that will be the greatest Fathers’ Day gift of all. If you can’t tell him in person or by phone, then set aside a few quiet moments and reflect on his memory.

Have a great weekend (and a Happy Fathers’ Day if that applies to you)!

Randy

Flushing Out the Bugs

-->

First, let me say that all of May has been a very difficult month weather-wise for those of us in Oklahoma, then later in May, for folks in Texas. Thankfully, all the tornadoes and flooding did not affect us personally, but we have friends and neighbors who were impacted and some of the stories are just tragic. So, I ask that if you are able to send a relief gift to the Red Cross designated for these disasters, please do so. It would really help those in need.

Here in Oklahoma we have had two years of extreme drought. One of the major lakes was over 31 feet below normal levels. Now, it has risen to 99% capacity. We have some lakes that are 33 feet above normal. Just in the month of May we have had 27.5 inches of rain, which shatters the record for the wettest month in history 

--> (May 2013 with 14.52 inches and the all time monthly record was 14.66 in June of 1989). Texas has also seen similar records broken. In short, we’ve had all the rain we need, thank you. California, we would be happy for you to get some of this for your drought.

The image above is of the main street of my hometown, Chickasha, OK.

Then, there are the tornadoes that make everything even more exciting. One night this month, we had to take shelter twice but no damage, thankfully. Then yesterday morning I was awakened at 5:30 a.m. to the sounds of tornado sirens. That is freaky because you have to act fast to see what is really happening. In this case, the tornado was 40 miles away, heading the opposite direction. I question the decision to sound the alarm in that situation.

Anyway…with that context…

About a week ago, I started noticing ants everywhere in and around our house. I mean parades of them everywhere. Ironically, I even found one crawling on my MacBook Pro!

Then, came the spiders, a plethora of other bugs, snakes and even fish in some peoples’ years. A friend reported seeing a solid white opossum near his house, which is very unusual.

And you perhaps heard that in one tornado event nearby on May 6, a wild animal preserve was hit and it was reported for a while that lions, bears, tigers, etc. were loose. Turns out that was a false report, too. But it did make for some juicy Facebook pictures for “Tigernado” movies.

-->

Other weird things have happened as well, such as storm shelters and entire swimming pools popping out of the ground due to the high water table (and poor installation in some cases)!

But back to the ants and bugs and why they are everywhere. Turns out that we have had so much rain, their nests and colonies were destroyed and they are now looking for other habitats. The same has occurred with spiders, snakes, mice and rats.

In fact, my wife and I are finding bugs we have never seen before. I had to look some of them up on the Internet just to know what kind of bug I was killing.

That caused me to think about a new testing analogy to reinforce a really great testing technique. To flush out the bugs in something, change the environment.

Of course, the difference here in this analogy is that software bugs are not like actual bugs in many regards. However, there are some similarities:

·      Both have taxonomies

·      Both can be studied

·      Both can mutate

·      Both can travel

·      Both can destroy the structure of something

·      Both can be identified and removed

·      Both can be prevented

·      Both can be hidden from plain view

The main differences are:

·      Bugs have somewhat predictable behavior – not all software defects do

·      Bugs can inhabit a place on their own initiative – software defects are created by people due to errors

(Although I have wondered how squash bugs know how just to infest squash plants and nothing else…)

In the recent onslaught of ants, it is the flooding that has caused them to appear in masses. In software, perhaps if you flooded the application with excessive amounts of data such as long data strings in fields, you might see some new bugs. Or, you could flood a website with concurrent transaction load to see new and odd behavior.

Perhaps you could do the opposite and starve the environment of memory, CPU availability, disk space, etc. to also cause bugs to manifest as failures.

This is not a new idea by any means. Fault injection has been used for many years to force environmental conditions that might reveal failures and defects. Other forms of fault injection directly manipulate code.

Another technique is to test in a variety of valid operational environments that have different operating systems, hardware capacities and so forth. This is a great technique for testing mobile devices and applications. It’s also a great technique for web-based testing and security testing.

The main principle here is that if you can get the application to fail in a way that causes it to change state (such as from “normal state” to “failure state”, then it is possible to use that failure as a point of vulnerability. Once the defect has been isolated and fixed, not only has a defect been found and fixed, but also another security vulnerability has been eliminated.

Remember, as testers we are actually trying to cause failures that might reveal the presence of defects. Failure is not an option – it is an objective!

Although, we commonly say that testers are looking for defects (bugs), the bugs are actually out of our view many times. They are in the code, the integration, APIs, requirements, and so forth. Yes, sometimes we see the obvious external bug, like an error message with confusing wording, or no message at all.

However, in the external functional view of an application or system, testers mainly see the indicators of defects. These can then be investigated for a final determination of really what is going on.

As testers, we can dig for the bugs (which can also be productive), or we can force the bugs to manifest themselves by flushing them out with environmental changes.

There is one more aspect to this situation. With all the standing water and moisture, the next phase will be mosquitoes and ticks. The tick invasion has already started.  Instead of being flushed out my the flooding, these parasites are attracted to it. What attracts the bugs in your software?

And let’s be real here. In some software, the bugs are not at all hard to find!

Me? I’ll continue to both dig and flush to find those defects. Even better, I’ll go upstream where the bugs often originate (in requirements, user stories, etc.) and try to find them there!

Upcoming ASTQB Conference 2015 and Free Webinar

I hope you had a great weekend!

I want to let you know about two events that will add value to your testing efforts. 

 

I'm very excited to be a speaker at the upcoming ASTQB Conference 2015 in Washington, D.C. on September 14 - 16. This is a special conference because we are giving focus to critical topics such as Cybersecurity Testing, Testing of Critical Applications, The Business Value of Testing, Agile Testing, and Test Leadership. In this conference, our goal is to provide valuable take-away ideas for increasing the reliability, security and quality of software projects.

I often tell my clients there are two places you don't want to be during or after a project - the newspaper and the courtroom. Your organization's reputation is at stake with every project. I'm sure, like me, you hear stories every week of another cyber attack, system failure, or failed project. The costs of these failures are enormous.

At this conference, we are bringing together some of the country's leading experts on cybersecurity, software quality, and test management to provide real-world solutions to some of the most challenging issues we face as software testers.

Early-bird pricing is still available until June 15. But, if you use the code "astqb2015a2u" during registration, you get an extra 10% discount!

To see more information and to register, just go to http://www.astqb.org/certified-tester-resources/astqb-software-testing-conference/

Free Webinar - Thursday, June 4 from 1 p.m. to 2 p.m. EDT

As part of the lead-up to the ASTQB Conference 2015, Taz Daughtrey and I will be presenting a free one-hour webinar on how to "Protect Your Company - and Your Software Testing Career." This free sneak peek of the ASTQB Conference will preview the keynote topics, tutorials and breakout sessions that are designed to keep you out of trouble.

In addition to the preview of the conference topics, Taz and I will share some practical information you can use immediately in testing cyber security, mobile applications and agile projects. I'll discuss a few of the new "Free and Cheap Tools" I have found recently as well.

I promise it will be an entertaining and informative time!

To register, visit https://attendee.gotowebinar.com/register/1292443299731168257

Very important note: This webinar will be full at 100 people. We will probably get 300 or more registrants, so if you want to actually get in to the session, you will want to log in early - at least 15 minutes prior.

I really hope you can join me at one or both of these events!

Thanks for reading,

Randy

Just Another Brick in the Wall ( And What it Means to Your Career)

I hope you are having a great week. I wanted to share some thoughts today about building your career. I hope you read through this short article and see some of the training events and offers I have for a limited time.

 

Recently, there have been two new homes built right next to me. The noise and mess can really get to my wife and I at times, but it’s a part of living in a partially developed neighborhood.

The house across the street caught my attention the other day. The house has been under construction for months and now the workers are in the process of laying natural stone on the entire front of the home.

What strikes me about this process is how slow it goes. This is not a process that can be completed in a day or two. This is more like a matter of weeks. Each stone must be made to fit in a particular spot to achieve a particular appearance. The stones can’t be cut in advance because each stone is uniquely fitted with other uniquely shaped stones.

This got me thinking about how we build our careers. Your basic education in school is the foundation, but after schooling is finished is when the real learning begins out in the real world.

All the skills we learn, the experiences we have with people, the books we read, the courses we attend, the projects we work on, are all stones in our wall. That’s why the wise person keeps fitting new stones into their wall.

Some people end up with a fully formed wall (i.e., career), although sometimes it may need even more stones added. Others lay only a few stones every so often that may look nice to a point, but fail to reach the level they desire.

This is hard work. It takes time to read the books, take the courses, complete the projects, get the mentoring, make connections, and do all the other things needed to keep building a career.

This is also why sometimes we see people with twenty years experience in their field, but it’s actually one year of experience repeated twenty times over. You want to be the person with diverse knowledge and experience. That’s one reason I went into consulting. I figure that one year of consulting experience is like three to five years of job experience in that I get to experience so many new things just in one year.

My encouragement to you in this short post is to stay at the work of adding those stones to your career wall. It’s slow and painstaking at times, but the reward is a beautiful work of craftsmanship – a career that serves you now and in the future.

E-Learning Specials

I have five courses on sale through Wednesday, May 13th:

Basic Training in Software Testing - $249 per person, a savings of $150.

Structured User Acceptance Testing - $349 per person, a savings of $221.

All ISTQB Advanced Level Courses - $100 off the normal price, exam still included! Use Coupon Code "ASTQB12A" to get the discount.

If you already have the ISTQB Foundation Level certification, now is a great time to go deeper with advanced level training!

Live Online Class - Establishing the Software Quality Organization - May 19 - 20, 2015, 1:00 p.m. - 4:00 p.m. EDT

This is a great class led by Tom Staab. In this course you will learn the activities required to establish a successful software quality organization (SQO). The SQO is comprised of three distinct quality functions, quality assurance, quality control (testing), and configuration management, that work in harmony and complement each other. The successful establishment of this function requires careful planning and execution. It is essential that the SQO function provides business value and ROI to the organization; therefore it is imperative that it has the proper placement, infrastructure, and governance. This class further defines all activities related to the successful planning and establishment of an SQO activity.

Register Here

Thanks for reading this newsletter! Please contact me if I can be of any service to you. I am happy to create a custom quote on training and consulting for your team.

Best regards,

Randy Rice

The Ins and Outs of Entrance and Exit Criteria

Hi All,

Here are the slides from today's webinar - "The Ins and Outs of Entrance and Exit Criteria".

You can find the webinar recording at: http://www.astqb.org/certified-tester-resources/istqb-certified-tester-resource-area/

Also, I am working to develop this topic into a micro-learning format for a 3-hour e-learning course. I may also conduct a live virtual session or two. If you are interested, just contact through my website at http://www.riceconsulting.com.

Thanks!

Live Virtual Training in User Acceptance Testing, Testing Mobile Devices, and ISTQB Foundation Level Agile Extension Certification

I am offering three courses in live virtual format. I will be the instructor on each of these. You can ask me questions along the way in each course and we will have some interactive exercises. Here is the line-up:

April 1 - 2 (Wed - Thursday) - User Acceptance Testing 1:00 p.m. - 4:00 p.m. EDT.  This is a great course to learn a structured way to approach user acceptance testing that validates systems from a real-world perspective. Register at https://www.mysoftwaretesting.com/Structured_User_Acceptance_Testing_Live_Virtual_p/uat-lv.htm

April 7 - 8 (Tuesday - Wednesday) - Testing Mobile Devices 1:00 p.m. - 4:00 p.m. EDT. Learn how to define a strategy and approach for mobile testing that fits the unique needs of your customers and technology. We will cover a wide variety of tests you can perform and you are welcome to try some of the tests on your own mobile devices during the class. Register at https://www.mysoftwaretesting.com/Testing_Mobile_Applications_Live_Virtual_Course_p/mobilelv.htm

April 14 - 16 (Tuesday - Thursday) - ISTQB Foundation Level Agile Extension Course 1:00 p.m. - 4:30 p.m. EDT. This is a follow-on to the ISTQB Foundation Level Certification. The focus is on understanding agile development and testing principles, as well as agile testing methods and tools. The course follows the ISTQB Foundation Level Extension Agile Tester Syllabus 2014. Register at https://www.mysoftwaretesting.com/ISTQB_Agile_Extension_Course_Public_Course_p/agilelv.htm

I really hope you can join me in one of these courses. If you want to have your team trained, just let me know and I'll create a custom quote for you.

ISTQB Advanced Test Manager e-Learning Course Now Available

I am excited to announce the availability of the ISTQB Advanced Test Manager certification course in e-Learning format.

This course contains the equivalent of 4.5 days of live training. However, with e-learning, you can take the training in small pieces.

You get:

• Narrated slide shows in mv4 format
• Course notes in a PDF viewer
• Exercises to help you apply the knowledge learned
• Practice exams
• Lifetime access
• Access to me, Randy Rice, to ask any questions.
• One electronic exam voucher 

Pre-requisites:
You must hold the CTFL certification and have at least 3 years of verifiable full-time experience in software or systems testing, development, quality assurance, engineering or a related field.

Click here for more details about the ISTQB Advanced Test Manager certification course.
Click here for a course demo.
Click here to register for the course. 

Feel free to contact me with any questions!