STAREAST 2025 - Security Testing

Web applications are often security critical or serve as front-ends for security critical applications, making web testing for vulnerabilities an essential part of software testing. Unfortunately, most software testers have not been taught how to identify web security issues while testing applications. Join Tom Stiehm as he shares what you need to know to security test web-based applications as part of your overall testing process. Learn about the most common web security vulnerabilities and how they are introduced into web code and exploited by hackers. Explore test techniques for...

In today’s microservices-driven landscape, ensuring seamless communication between services is critical. Traditional testing methods often fall short when it comes to detecting integration issues early in the development cycle, leading to unexpected failures in production. Contract testing is emerging as a powerful solution to this challenge, providing a way to verify that services meet agreed-upon expectations without relying on full end-to-end testing. This session will delve into the fundamentals of contract testing and how it enhances API quality assurance by detecting inconsistencies...