InfoQ Homepage Articles

Articles

RSS Feed

Newer Older

Defending against Web Application Vulnerabilities

In this article, authors discuss the security in software development life cycle and how to defend against web application vulnerabilities using techniques like white-box analysis and black-box testing. They also talk about secure coding practices based on the defense-in-depth approach using three lines of defense: input validation, hotspot protection, and output validation.

Nuno Antunes Marco Vieira
on Jul 27, 2012
The Culture Game - a book by Dan Mezick

The book looks at the foundations of culture, what constitutes organisational culture and discusses ways to encourage and lead cultural transformation. Drawing on his experience with Agile practices the author examines the values that underlie culture, shows how the Agile values engender organisational learning, and how important a learning culture is to success in the modern business environment

Shane Hastie
on Jul 26, 2012
Cloud Computing Described Through The Analogy of (US) Thanksgiving Dinner

This article explains Cloud computing using the analogy of US Thanksgiving dinner.

JP Morgenthal
on Jul 25, 2012
Exterminating Heisenbugs

Victor Grazi presents ten tips to keep in mind when architecting or developing concurrent applications in Java.

Victor Grazi
on Jul 24, 2012
Tackling real-world unit testing problems

All the information, books and tools are out there, just pick up NUnit, and you’re good to go, right? Not exactly. Even before deciding to start unit testing, we need to sift through real experience of others; good and bad, horror stories and miracles (“This one test saved me a week of work!”). Then, we take the plunge, and realize: There’s so much to learn!

Gil Zilberfeld
on Jul 23, 2012
Introducing: Restful Objects

Restful Objects is a public specification of a hypermedia API for domain object models. Version 1.0.0 of the specification has just been released and there are already two open source frameworks that implement the specification - one for the Java platform and one for .NET.

Dan Haywood Richard Pawson
on Jul 19, 2012
Book Review: Java Application Architecture

Java Application Architecture: Modularity Patterns with Examples using OSGi is Kirk Knoernschild's seminal book on a pattern catalogue for modular systems design. Starting with an overview of the arguments for modularity, the main section in the book introduces eighteen categorised patterns for module development, and concludes with an OSGi example. InfoQ spoke to Kirk to find out more about it.

Alex Blewitt
on Jul 18, 2012
Key Takeaway Points and Lessons Learned from QCon New York 2012

The first annual QCon New York brought together over 400 team leads, architects and engineering directors. This article summarizes the key takeaways from the event as blogged and tweeted by attendees.

Abel Avram
on Jul 17, 2012
Culture & Methods

My Experience as a QA in Scrum

The QA role in Scrum is much more than just writing test cases and reporting bugs. In this article, Priyanka Hasija shares her experiences and the valuable lessons learned over the past 2 years while serving as a QA analyst on a Scrum team. She explains how QAs not only perform agile tests but also fill many other roles and responsibilities, earning them a place of importance on the team.

Priyanka Hasija
on Jul 17, 2012
Cut off wrong dependencies in your .NET code

Patrick Smacchia advises developers to treat each namespace in an application as a component, and make sure there are no dependency cycles between your components. He claims that by abiding by this simple tenet, the structure of a large application can’t diverge to the monolithic block of spaghetti code base that seems to be the rule more than the exception in enterprise professional development.

Patrick Smacchia
on Jul 16, 2012
Virtual Panel: Code-to-Test Ratios, TDD and BDD

In the last couple of months several online discussions took place about test first or test last, code-to-test ratios or whether BDD is really just TDD. InfoQ asked the opinion of BDD and TDD experts.

Manuel Pais
on Jul 13, 2012
Writing Automated Acceptance Tests with Spec Flow

Acceptance or functional testing is a type of testing where a system is tested to see if the required specifications are met. These tests are a type of black-box testing where the internal implementation is irrelevant. Mustafa Saeed Haji Ali demonstrates how to automate these tests using SpecFlow.

Mustafa Saeed Haji Ali
on Jul 06, 2012

Newer Articles

Older Articles

InfoQ Software Architects' Newsletter

Articles