QAExperts.pro
[https://www.facebook.com/qaexperts.pro] Load Testing Essentials Kyiv October/November 2019 Security Testing OWASP TOP10 Kyiv 12-13 October 2019 QAExperts Boost your qualification with QA Experts ! Register for Workshops Workshop details Home About Workshops Speakers Prices !Signup Blog Partners Contact Us Registration QA workshops from acting QA experts Obtain QA skills, best QA practices, lessons-learned evolved from many years experiencejust in 2-day workshops Why Us!? Our Workshops More About Us QA Experts Pro QAExperts.Pro is the workshop center of excelence targeting QA and QC specialists that already have some working experience in QA area. Our main goal is to teach and improve your QA skills, based on our many years, projects, and challenges experience. On our workshops you will get the best QA practices and approaches tailored specifically to the current world requirements and realities. Our workshops are always up to date and can fast and surely prepare you for the demands of the current software development market. Important to notice that at each workshop our main concentration points are: Lessons learned and best practices Experience and real Life cases Important nuances and details Modern tendencies and trends Always more practice than theory. The current list of workshops you can find here . About Us QAExperts.pro is an initiative, advanced by well-known QA Expert Volodymyr Prymakov . The main goal of it is to provide esperienced QA specialists with a possibility to improve their professional knowledge and skills in short term period. Established in 2017 year with 2 workshops, it expected to grow to a bunch of narrowly focused and market-demanding workshops in QA. Our foundation stones are: Versitle and solid ongoing expertise Wide view on the tought subjects Best practices and lessons learned Advanced and promissing technologies/approaches Practical and gamification based workshops And other interesting and important stuff. Workshop Shedule Manual QA in Agile (2 days workshop) In Development Register to keep updated about the workshop! OWASP TOP 10 - Hacking in Action (2 days workshop) Kyiv, 12-13 October 2019. Register... Load testing essentials (2 days workshop) October/November 2019. Register... API test automation: from A to Z (2 days workshop) In Development Register to keep updated about the workshop! More workshops are coming! Please subscribe for updates here . 2 days 2 day workshops 16 + hours 16+ hours of effective workshop time 2 + trainers Every workshop is held by 2 and more QA experts 16 participiants 16 or less participiants per workshop QA Workshops in Detail Shortest way to explore the value which you can get from QA Experts Load Testing Essentials October/November 2019 OWASP TOP10 Testing 12-13 October 2019 Manual QA in Agile In Development API test automation - 360° In Development About the Workshop Day 1 Day 2 Requirements The main purpose of this workshop is to give you full understanding of load testing discipline and graft all the required skills for managing it independently. In addition to mastering the functionality of the main and auxiliary load testing tools, emphasis is made on resolution of the most common practical tasks and typical load testing issues. By the way, to comply with modern realities, workshop employs such interesting things like load testing mobile applications, web-services, and ajax-applications. Workshop format: 2 trainers 16 or less participants 2 days (16+ hours) 10:00 Kick-Off and Intro into client-server communication Introducing the speakers and describing the workshop goals. --------------------------------------------------- Typical client-server architecture and communication. Web-browsers behavior. HTTP requests/responses nature. Tools emulating http requests: curl, Apache bench. Practice: Generating http requests 11:25 Performance testing theory Performance testing types. Performance testing process. Performance testing in SDLC and specifically in Agile. Practice: QUIZE ----------- Coffee break (15 min) ----------- 12:20 Light performance testing plan Planning Performance/Load testing activities. Solving Performance/Load testing prerequisites. Practice: Solving 2-3 typical real-life cases of performance testing planning 13:25 Traffic Recording tools Introduction to performance testing tools: main and facilitating tools. --------------------------------------------------- Firebug/Chrome developers tools + how to get started with jmeter. Practice Jmeter: 'HTTP(S) Test Script Recorder'. Practice ----------- LAUNCH (1 hour) ----------- Fiddler Practice Fiddler to Jmeter convertor. Practice Recording mobile traffic from iOS, Android. Practice ----------- Coffee Break (15 min) ----------- 16:35 Jmeter main functionality Jmeter (bare) and plugins. Elements of Jmeter Test Plan. Practice 17:00 - 19:00 Emulating http(s) traffic HTTP(s) Sampler and its Parameters. Demo of Emulating Http traffic. Debugging traffic in Jmeter by setting Fiddler as proxy. Practice Verifying Responses - working with Assertions. Practice Making Your flow more Real-life - Adding Think times. Practice Emulating logged-in flows. Practice Multi-users load. Practice Homework 10:00 Step back and Q/A Home work discussion and Questions/Answers. Reminder of the things learned previous day. 10:35 Correlating and Parameterizing Requests Grouping Requests. Working with Variables. Practice Working with Functions. Practice Extracting and Reusing information from requests applying Regular Expressions. Debugging Variables usage. Practice: Emulating payment and search flows Headers manipulation, Cookies manipulation, Redirect logic manipulation. Practice ----------- Coffee break (15 min) ----------- 12:30 Adding advanced logic to flows. Working with test data Reading test data from file. Practice Reusing code. Practice Looping Requests. Using IF controller. Stopping Test when needed. 13-20 Emulating AJAX Repetitive calls Practice: Emulating AJAX Repetitive calls ----------- LAUNCH (1 hour) ----------- 14:20 Practice: Working with Files Practice: Uploading file to server Practice: Downloading file from server 14:50 Testing Web-services (Rest, SOAP) Soap and REST services (theory). Emulating SOAP Requests, Soap UI and Jmeter. Practice Emulating REST request. Practice 15:25 Applying Jmeter for special needs: Working with Emails and Database testing Practice: Reading Emails. Practice: Load testing Relative Databases (SQL) ----------- Coffee Break (15 min) ----------- 16:20 Test Execution Test execution. Multi-Load Injectors runs. Console-based runs. Practice Test users and connected data: Preparing tested app, filling it in with data. 17:00 Test results analysis and reporting Server sider metrics. Server-side performance measuring tools. Practice Client Side Metrics and Graphs + Plugins. Practice Errors classifications. Release Readiness Concussions. Reviewing 3 Case Studies 18:30 Jmeter settings, bugs, and limitations. Lessons learned Jmeter Settings. Jmeter bugs and Limitations. Tips and Tricks. 18:50 Closing-Up Overview of Advanced jmeter functionality. Recommendations on further steps. Certificates Awarding ceremony. Professional level: Manual QA and higher Laptop: Wifi, Windows OS About the Workshop Day 1 Day 2 Requirements The vast majority of organizations nowadays use agile as the primary software development method. It can include pure agile and hybrid approaches. Consequently QA should feel like a duck to water in agile. It implies that besides the agile basics, QA is expected to know all the challenges the agile process can potentially bring to the project from quality assurance point of view and know how to successfully resolve them. So if you would like to get or improve your skills in agile quality assurance or if you have a desire to get different views on the subject, you are welcome to take part in our workshop “QA in Agile”. Workshop format: 2 trainers 16 or less participants 2 days (16+ hours) 10:00 Software development life cycle and methodologies. Introduction to Agile Introducing the speakers and auditory to each other. Describing the workshop goals --------------------------------------------------- Main software development methodologies. Introduction into Scrum and Kanban process. Benefits of Agile. Agile Manifesto. Scrum process visualtization. Process, roles, meetings, artifacts. Role of tester in agile. Requirements to an agile tester. ----------- Coffee Break (15 min) ----------- Practice: Scrum Penny Game 12:35 Introduction into development, project management, QA infrastructure and tools Development tools and infrastructure. Project & task management tools and infrastructure. Test management tools and infrastructure. 12:50 Testing process in Agile Reminder of testing process in General. Agile testing process on project, release, and milestone levels. Different sprint organization models. Different types of sprints and different testing approaches in them. Testing activities and their priority in sprints. ----------- LAUNCH (1 hour) ----------- 14-50 Sprint QA Activities Test Design and test case maintenance in a sprint. New functionality testing in a sprint. Regression and smoke testing in a sprint/stabilization sprint. Types of regression testing: Cover, Selective, Full. Bug submission and retest in a sprint. Other types of testing in sprint. Task management system and its adjustment to QA process. Task management tool configuration recommendations. Recommended feature and bug Flow in a sprint. Test-entry/exit criteria. Definition of DONE. Practice: Emulating testing process in a sprint. Sprint QA-flow in action. ----------- Coffee Break (15 min) ----------- 17:00 Common SCRUM testing challenges Practice: Revising and solving common difficulties with testing and development in a sprint/scrum. Revising related case studies. Continuous integration and continuous deployment approaches. Testing in them. Development Tools and branching strategy. Role of automation in agile. Adjustment of manual testing to automated testing. 18:10 Target platforms and test environments Target platforms definition and prioritization. Types of test environments and testing activities on them. Practice: Target platforms definition and prioritization. Homework 10:00 Step back and Q/A Home work discussion and Questions/Answers. Reminder of the things learned previous day. 10:35 Testing throughout the software life cycle: seven testing principles. Test levels. Types of software testing Verification and validation. Seven testing principles. Test levels. Test types. Practice: Target apps - defining test levels and test types ----------- Coffee Break (15 min) ----------- 11:35 Test strategy/Master test plan. QA project startup questions Test strategy. Light-version Master test plan. Project Startup questions. Practice: QA Startup questions. 12-45 QA estimations global QA estimation (global). Practice: QA estimation (global). ----------- LAUNCH (1 hour) ----------- 14:30 Sprint planning, estimation, and monitoring overview Level/Sprint test plan. Sprint estimating. Sprint monitoring. QA team size, structure, roles and responsibilities on the project/product level. Practice: Planning and estimating sprint QA activities. ----------- Coffee Break (15 min) ----------- 16:10 Requirements/User stories analysis. Other test bases Why are requirements important?. Characteristics of requirements. Typical quality problems of requirements. Practice: Requirements’ flow in real life 16:45 Test documentation in Agile Test cases, check lists and test suites. Test case statuses. Traceability matrix. Test coverage and status tracking boards. 17:15 Test management tools Test management tools. Test management tools configuration. Test suite organization for agile. Practice ----------- Coffee Break (15 min) ----------- 17:50 Release-readiness criteria. Test summary report Bugs types and priority. Bugs anatomy. Release-readiness criteria. QA metrics. Test summary report. Practice: QA report creation. 19:05 Bonuses Problems in distributed teams - how to resolve them. 19:15 Closing-Up Overview of advanced QA workshops. Recommendations on further steps. Certificates Awarding ceremony. Professional level: Junior/Middle Manual QA (1+ year experience) and higher About the Workshop Day 1 Day 2 Requirements As a rising trend in IT industry, cyber security has exponentially increasing demand around the world. Within our 2-day workshop you will learn about TOP 10 vulnerabilities defined by OWASP and exploit each of them by yourself in practice using various tools and methods. As well, you get to know how to protect your software from each vulnerability, plan such tests and automate where possible. This is going to be fun, meet you there! Workshop format: 2 trainers 16 or less participants 2 days (16+ hours) 10:00 Introduction into Security Testing Introducing the speakers and auditory to each other. Describing the workshop goals. --------------------------------------------------- History security. Hacker attacks. Security testing in SDLC. Tools for Security testing. OWASP TOP 10 - Brief introduction. 12:35 A1:Injection What it is “Injection” attack. Examples of attacks. Сauses of “Injection” vulnerability. Tools for search SQL injection. Demo and Practice in search SQL injection Protection Recommendations. 12:50 A2:Broken Authentication What it is “Broken Authentication”. Examples of attacks. Сauses of “Broken Authentication” vulnerability. Tools for search “Broken Authentication”. Demo and Practice in search “Broken Authentication” Protection Recommendations. ----------- LAUNCH (1 hour) ----------- 14-50 A3:Sensitive Data Exposure What it is “Sensitive Data Exposure”. Examples of attacks. Сauses of “Sensitive Data Exposure” vulnerability. Tools for search “Sensitive Data Exposure”. Demo and Practice in search “Sensitive Data Exposure” Protection Recommendations. ----------- Coffee Break (15 min) ----------- 17:00 A4:XML External Entities (XXE) What it is “XML External Entities (XXE)”. Examples of attacks. Сauses of “XML External Entities (XXE)” vulnerability. Tools for search “XML External Entities (XXE)”. Demo and Practice in search “XML External Entities (XXE)” Protection Recommendations. 18:10 A5:Broken Access Control What it is “Broken Access Control”. Examples of attacks. Сauses of “Broken Access Control” vulnerability. Tools for search “Broken Access Control”. Demo and Practice in search “Broken Access Control” Protection Recommendations. Homework 10:00 A6:Security Misconfiguration Home work discussion and Questions/Answers. Reminder of the things learned previous day. What it is “Security Misconfiguration” attack. Examples of attacks. Сauses of “Security Misconfiguration” vulnerability. Protection Recommendations. 12:35 A7:Cross-Site Scripting (XSS) What it is “Cross-Site Scripting (XSS)” attack. Examples of attacks. Сauses of “Cross-Site Scripting (XSS)” vulnerability. Tools for search "Cross-Site Scripting (XSS)". Demo and Practice in search "Cross-Site Scripting (XSS)" Protection Recommendations. 12:50 A8:Insecure Deserialization What it is “Insecure Deserialization”. Examples of attacks. Сauses of “Insecure Deserialization” vulnerability. Tools for search “Insecure Deserialization”. Demo and Practice in search “Insecure Deserialization” Protection Recommendations. ----------- LAUNCH (1 hour) ----------- 14-50 A9:Using Components with Known Vulnerabilities What it is?. Examples of attacks. Сauses of vulnerability. Tools for search vulnerability. Demo and Practice in search vulnerability Protection Recommendations. ----------- Coffee Break (15 min) ----------- 17:00 A10:Insufficient Logging & Monitoring What it is “Insufficient Logging & Monitoring” attack. Examples of attacks. Сauses of “Insufficient Logging & Monitoring” vulnerability. Protection Recommendations. 18:10 Closing-Up Conclusions. Literature. Recommendations on further steps. Certificates Awarding ceremony. Professional level: Middle Manual QA and higher Laptop: Wifi, Windows OS Download schedule for Load Testing Essentials Download schedule for Security QA OWASP TOP10 Download schedule for Manual QA in Agile Top speakers Wide expertise, comprehensive skills, top-positions, and extraordinary personalities! Mykola Kovsh Performance QA Manager Performance QA Manager at Ciklum, 3.5 years in load testing, 6.5 years in QA, Regular speaker at QA conferences. Anton Serputko Senior Performance QA Analyst Senior Performance QA Analyst at EPAM, 3.5 years in load testing, 4.5 years in QA. Coach at StartIT. Mentor at ITKPI. Regular speaker at QA conferences and workshops. Svyatoslav Login Lead QA and Security QA 3 years in Security Testing, 7 years in QA, Security Testing Evangelist, Trainer, Speaker at QA conferences. Evgeny Tolchinsky QA Lead 4,5 years in Quality assurance. Speaker of Ukrainian and interantional conferences (KyivQaDay, Simplicity QA 360, ComaQa Minsk) and meetups (OpenTechWeek, Speakers’ Corner). Pricetable Sooner you register - less you pay! -25% Early Birds $180 4550 UAH 6 tickets -15% Main Chance $215 5400 UAH 6 tickets 100% Last Chance $250 6300 UAH 6 tickets Buy Now Newsletter Signup No Spam - only latest news, new workshops, and activity updates! Register for QA Experts workshops right now! Obtain QA skills, best QA practices, lessons-learned evolved from many years experience just in 2-day workshops Register Signup for our Blog! Partners Be introduced to our valued partners Become a Partner Location Peremohy avenue, 33, Kyiv, Ukraine, (Office 1)(3 min from subway station Politekhnichnyi instytut) Singup for Updates Contact Us