InfoQ Homepage Culture & Methods Content on InfoQ
-
Virtual Panel: Security Considerations in Accessing NoSQL Databases
NoSQL databases offer alternative data storage options for storing unstructured data compared to traditional relational databases. Though the NoSQL databases have been getting a lot of attention lately, the security aspects of storing and accessing NoSQL data haven't been given much emphasis. This article focuses on the security considerations and best practices in accessing the NoSQL databases.
-
Developer-Driven Threat Modeling
Threat modeling is critical for assessing and mitigating the security risks in software systems. In this IEEE article, author Danny Dhillon discusses a developer-driven threat modeling approach to identify threats using the dataflow diagrams.
-
Virtual Panel: Specification by Example, Executable Specifications, Scenarios and Feature Injection
In the last couple of years terms like Specification by Example, Executable Specifications and Feature Injection have showed up quite frequently in the community, often in relation to Behaviour Driven Development (BDD) or tools like Cucumber or SpecFlow. InfoQ have talked to some of the leading experts in this domain about what these practices are and how they relate to BDD.
-
Interview and Book Review: Specification by Example
Gojko Adzic has written the book Specification by Example, explaining the set of techniques for describing the functional and behavioural aspects of a computer system in a way that they are useful to the development team (expressed ideally as executable tests), understandable by non-technical stakeholders and maintainable to remain relevant despite changing customer demands.
-
Test automation and Continuous Delivery
This article shows how automating certain programmable aspects of a test suite can help software delivery. Covered are automated testing, costs per deployment, tests as documentation & manual testing.
-
Agile is at a crossroad: Scale or fail?
Risk management is the hottest topic in IT. Processes for effective risk management and investment decision making will allow Agile techniques to scale beyond projects to the enterprise. Without them, Agile will be confined to the ghetto of development. In this article Chris and Olav present some tools and techniques to identify and manage risks on Agile projects.
-
Agile Hybridization - Novel Experimentation or "They just don't get it."
Chris Goldsbury discusses the perceived conflict between waterfall and agile processes and identifies a set of context factors that provide guidelines for adopting an appropriate hybrid process between the two.
-
Resilient Security Architecture
In this IEEE article, author John Diamant talks about how to improve security quality of software applications using a proactive approach with techniques like Security requirements gap analysis and Architectural threat analysis in the early phases of software development life cycle.
-
Organizational Culture and Agile: Does it fit?
Recently, Agile Coach Michael Sahota has been exploring the impacts of organizational culture on Agile transformations. We caught up with Michael and asked him to answer a few questions for our readers.
-
Active Architecture for Agile Projects
Active Architecture is a type of documentation that helps to bridge the gap between User Stories in Agile Projects and large design deliverables on Traditional projects. It leverages the power and simplicity of User Stories. Unlike traditional design documentation that defines the structure or passive state of the design, Active Architecture defines the actions or active state of the design.
-
Patterns for Continuous Delivery
There is no one-size-fits-all solution to implementing Continuous Delivery. The number and composition of the teams will greatly affect what options are available and what trade-offs need to be made. Staff editor Jonathan Allen reflects on some of the patterns he has observed over the last 15 years.
-
Liz Keogh: 10 years of Agile - the Prophecy of Failure, and the Failure of Prophecy
Liz Keogh, recipient of the Gordon Pask award in 2010, discusses the predictions of Agile as a fad and how the movement has stood the test of time over the last ten years. She warns against complacency and of ignoring the manifesto value of "individuals and interactions over processes and tools" in our examination of Agile principles and practices - Agile itself must evolve to remain relevant.