May 26
A Metric is a quantitative measure of the degree to which a system, component or process possesses a given attribute. Software metrics are measures that are used to quantify the software, software development resources and software development process. A metric is defined to be the name of a mathematical function used to measure some attribute of a product or process. The actual numerical value produced by a metric is a measure.
For example, cyclomatic complexity is a metric; when applied to program code, the number yielded by the formula is the cyclomatic complexity measure.
Read the rest of this entry »
May 26
@1 Fix The Problem, Not The Blame.
@2 Tell People What You Want, Not How To Do It.
@3 Manage the function, not the paperwork.
@4 Don’t DO Anything.
@5 You never have to make up for a good start.
@6 Get out of your office.
@7 Lead by example.
@8 Delegate the easy stuff.
@9 Don’t get caught up in looking good.
@10 Quality is just conformance to requirements.
@11 Learn from the mistakes of others.
@12 Set S.M.A.R.T. Goals.
@13 Set an example.
@14 Know Your GPM (Goals, Plans, Metrics).
@15 Train Your Supervisors.
@16 You Can’t Listen With Your Mouth Open.
@17 Practice what you preach.
@18 Leaders create change.
@19 Don’t Limit Yourself.
@20 Anyone can steer the ship in calm waters.
@21 You have to make a difference.
May 25
There is an ongoing phishing scam going on these days that is hitting Facebook users that can result in crashing your computers or mobile phones and steal your passwords? If not, beware, do not open the files ending with “.at” or “.be”.
The phishing scam is being run through the spam messages which steals the sensitive information of the users. In the attack, the messages are circulated with a subject line of “Hello” and a prompt to check out “areps.at” or other URLs ending in “.at”.
The mails with the subject line “Look at This” and links like — goldbase.be, greenbuddy.be, silvertag.be, picoband.be — leads tomalicious websites, which if visited, could download malware onto computers through a “driveby download” application.
The URL connectivity, before being blocked directs the visitor to a fake Facebook page and the mail ID and password are stolen as soon as it is logged-in again. According to the blog.Facebook the password in such cases should be changed immediately and the same message should be sent across to one’s Facebook acquaintance.
May 23
Here is one Security Testing Checklist that may help you
1. Are all the Internet-facing servers within the system registered with the corporate web office?
2. Do the test plans for the system include tests to verify that security functionality has been properly
implemented?
3. If the system is rated high on the business effect assessment or if it is Internet facing, has the
company security office been consulted to determine whether or not additional security testing
is required?
4. Has the security test covered the following?
a. application testing
b. back doors in code
c. denial of service testing
d. directory permissions
e. document grinding (electronic waste research)
f. exploit research
g. firewall and application control list
h. intrusion detection systems
i. manual vulnerability testing and verification
j. network surveying
k. password cracking
l. PBX testing
m. port scanning
n. privacy review
o. redundant automated vulnerability scanning
p. review of IDS and server logs
q. security policy review
r. services probing
s. social engineering
t. system fingerprinting
u. trusted systems testing
v. user accounts
w. wireless leak tests
Regards,
Read the rest of this entry »
May 17
Hi Readers,
Many of you have requested for some more sample papers.
So here is a site that offers free ISTQB practise exams http://www.patshala.com/istqb/
The IQTQB online tests on this site not only helps you to test yourself, they also help you learn. The best point here is that as soon as you give wrong answer their system will prompt you the right answer.
So just visit them
Read the rest of this entry »
Recent Comments