![\"test1\"](\"../../_img/test1.png\")
Requirement Analysis:
\n\n\n3 Amigo session, Sprint grooming, Sprint planning
\n
Functional testing refers to activities that verify a specific action or function of the code. These are usually found in the code requirements documentation, although some development methodologies work from use cases or user stories. Functional tests tend to answer the question of โcan the user do thisโ or โdoes this particular feature work.โ
Non-functional testing refers to aspects of the software that may not be related to a specific function or user action, such as scalability or other performance, behavior under certain constraints, or security. Testing will determine the breaking point, the point at which extremes of scalability or performance leads to unstable execution. Non-functional requirements tend to be those that reflect the quality of the product, particularly in the context of the suitability perspective of its users.
![\"test2.png\"](\"../../_img/test2.png\")
80%, 95, 70%?
\n![\"tdd.png\"](\"../../_img/tdd.png\")
\n\nTDD - Test-Driven Development:\nA technique where the unit test is designed first, then the feature is developed.
\n
1 most popular and important metrics in Test Automation:
\n\n\nROI Return of investment
\n
![\"test3.png\"](\"../../_img/test3.png\")
TDD - Test-Driven Development
\n\n\nthis approach works when the test is developed first, then the feature goes.
\n
BDD - behavior-driven framework is 1 successor of TDD.
\n\n\nInstead of defining the test itself, we focus on feature behavior.
\n
![\"test4.png\"](\"../../_img/test4.png\")
![\"test5.png\"](\"../../_img/test5.png\")
Suitable for: Regression, Load testing, Repeated execution
\nFocus on analysis of the application source code for security vulnerabilities
\nFocus on simulating attacks against running application
\nCombination of SAST and DAST
\nThe Open Web Application Security Project
\nTop 10 Critical Web Application Security Risks:
\n![\"test6.png\"](\"../../_img/test6.png\")
![\"test7.png\"](\"../../_img/test7.png\")
Tests: Functional, GUI, Usability, Accessibility, etc
\nTests: Functional, Integration, Performance, API, etc.
\nSonarQube
\n\n\nSonarQube is an open-source platform developed by SonarSource for continuous inspection of code quality to perform automatic reviews with static analysis of code to detect bugs, code smells, and security vulnerabilities on 20+ programming languages.
\n
Fortify
\n\n\npropriety tool to help do Static Code Analysis from a security point of view.
\n
JSHint
\n\n\na static code analysis tool for JS used at Mozilla, Facebook, wikipedia, Twitter etc.
\n
\n\nSmoke Testing, also known as โBuild Verification Testingโ, is a type of software testing that comprises of a non-exhaustive set of tests that aim at\nensuring that thte most important functions work. The result of this testing is used to decide if a build is stable enough to proceed with further testing.
\nSmoke tests can be functional tests or unit tests. Functional tests exercise the complete program with various inputs. Unit tests exercise individual functions, subroutines, or object methods.
\nIn the DevOps paradigm, use of a BVT step is one hallmark (็น็น) of the continuous integration (CI) maturity stage.
\n
\n\nRegression testing is the process of testing changes to computer programs to make sure that the older programming still works with the new changes. Regression testing is a normal part of the program development process and, in larger companies, is done by code testing specialists.
\n
Vulnerability Assessment
","tableOfContents":"(4) Testing of Non-Functional Requirements
\n