Khurram B.

The exploratory testing (ET) approach is commonly applied in industry, but lacks scientific research. The scientific community needs quantitative results on the performance of ET taken from realistic experimental settings. The objective of this paper is to quantify the effectiveness and efficiency of ET vs. testing with documented test cases (test case based testing, TCT). We performed four controlled experiments where a total of 24 practitioners and 46 students performed manual functional… Visa mer

The exploratory testing (ET) approach is commonly applied in industry, but lacks scientific research. The scientific community needs quantitative results on the performance of ET taken from realistic experimental settings. The objective of this paper is to quantify the effectiveness and efficiency of ET vs. testing with documented test cases (test case based testing, TCT). We performed four controlled experiments where a total of 24 practitioners and 46 students performed manual functional testing using ET and TCT. We measured the number of identified defects in the 90-minute testing sessions, the detection difficulty, severity and types of the detected defects, and the number of false defect reports. The results show that ET found a significantly greater number of defects. ET also found significantly more defects of varying levels of difficulty, types and severity levels. However, the two testing approaches did not differ significantly in terms of the number of false defect reports submitted. We conclude that ET was more efficient than TCT in our experiment. ET was also more effective than TCT when detection difficulty, type of defects and severity levels are considered. The two approaches are comparable when it comes to the number of false defect reports submitted. Visa mindre

In spite of advances made in the world of network security, a vast majority of security incidents are still attributed to the “internal threat” – end users – responsible for mis-configuring devices and programs, unknowingly propagating malicious code, or disclosing proprietary business information. The emerging P2P systems have characteristics that can turn them into an attractive infrastructure can be exploited to breach the security of a network, if policy regarding their usage in not in… Visa mer

In spite of advances made in the world of network security, a vast majority of security incidents are still attributed to the “internal threat” – end users – responsible for mis-configuring devices and programs, unknowingly propagating malicious code, or disclosing proprietary business information. The emerging P2P systems have characteristics that can turn them into an attractive infrastructure can be exploited to breach the security of a network, if policy regarding their usage in not in place. A rapidly evolving and changing technology, IDS is a defense system, purpose to find security violations and detects hostile activities in a host or network .IDS is capable to provide a view of unusual activity and issue alerts notifying administrators. According to Amoroso [1] "Intrusion Detection is a process of identifying and responding to malicious activity targeted at computing and networking resources", also IDS can distinguish between external attacks by hackers and internal originating from inside the organization. At the simplest level, you can think of and IDS as an alarm system, IDS provides much for computers what the alarm system provides for organization's physical security. Using the same defense system, this paper talks about what a P2P application is with problems when they are on any host or network. Implementation was done at iPhonica using different OpenSource [14] tools to come up with a solution. Visa mindre