Testing Your App: BCS Bristol Autumn School
Testing Your App: BCS Bristol Autumn School
Jim Thomas
Director of Software Testing
TVS background
TVS Germany
TVS UK
(2011)
(2008)
TVS France
(2012)
T&VS India
(2011)
• Why test?
Web App
servers servers
AUT
DB
servers
With more challenges
50X
20X
10X
1X 5X
Defects
Perfecto mobile
DeviceAnywhere
Test environment - emulators
uTest
Testing Different Aspects of Your App
Unit testing
• Functional
– Does App perform intended functions?
• UI
– Does it meet platform requirements etc?
• Usability
– Is it easy to use/intuitive?
• Localisation
• Performance/load
• Security
– Authentication, authorization, privacy etc
Manual testing
• Android • iOS
• Threat Modelling
– identifying possible attacks and defining controls to
prevent them
– prevent/detect/mitigate
– defensive v adversarial
• Static analysis
– Clang static analyser (Objective C)
– FindBugs (Java)
– Veracode (all platforms)
• Dynamic testing
– OWASP Zed Attack Proxy
• Forensic analysis
– Android Debug Bridge
– iPad File Explorer
– SQLite Database Browser
And finally …
You are not alone
65%
Do not have the right tools to test
52%
Do not have the devices readily available
Jim Thomas
[email protected]