Home > Ask the Security Experts > Application Security Questions & Answers > How can quality assurance tools aid software development?
Ask The Security Expert: Questions & Answers
EMAIL THIS

How can quality assurance tools aid software development?

Michael Cobb, featured expert EXPERT RESPONSE FROM: Michael Cobb, featured expert

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 15 September 2008
How can quality-assurance tools aid software development?

>
When investigating why a software program is not performing as expected, evidence nearly always points to one of the following problems:

  • Poor communication -- The developers didn't fully understand what the customer wanted, or the customer had unrealistic expectations.
  • Poor requirements -- The requirements were unclear, incomplete, too general, or not testable.
  • Poor change control -- Requests to add on new features after development started were never properly assessed.
  • Unrealistic schedule -- The timescale to produce the software meant corners had to be cut, such as little or no testing.
  • Inadequate testing -- The product was never systematically tested, and errors were never corrected before release.

These issues demonstrate the importance of proper specification, planning and management of a software project. To stand any chance of succeeding, a project needs to have adequate time allocated for planning, design, testing, bug-fixing, re-testing, making changes and documenting them. No quality-assurance tool is going to salvage a project if it doesn't have clear, complete, detailed and testable requirements that are agreed on by the key stakeholders.

Even with these elements in place, bugs will still emerge. With quality assurance, however, as an intrinsic part of the software life cycle, it's much more likely those problems will be found and eliminated, producing software that does what it was designed to do.

There are an increasing number of tools aimed at improving quality control and assurance, and they can certainly play a role in producing higher quality software. However, any new tool will take time to learn. For large, complex or ongoing projects, quality-assurance tools can certainly add value, but for a small project, the time and money may not be worth it. To judge whether a QA tool can aid your organization or project, ensure that it brings obvious improvements to the current testing process; it should enable you to run more tests, test in ways that were not previously feasible, or reduce excessively tedious manual testing.

Reports should help developers target those areas of the product that are causing problems. Other benefits can include improved test efficiency and issue-response times, along with better knowledge management, such as information collection, tracking and reporting. For project managers, a QA tool must provide insight into the status of the software so that they can better gauge product quality from the metrics produced. Managers must also be able to make informed decisions about development schedules and product delivery, as well as resource allocations.

Quality software will improve customer satisfaction and lower support costs, enabling an organization to spend more time and money on development and less on maintenance. Remember, quality is not an extra feature that can be added on at the end of a software project. The last thing you want is for your customers to find your bugs for you.

More information:

  • Learn how quality assurance practices can be used to prevent application logic attacks.
  • Get the latest news and expert advice on secure software development.


  • BROWSE BY TAG
    Application Security,   Application and Platform Security,   Software Development Methodology,   VIEW ALL TAGS

    Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



    RELATED CONTENT
    Application Security
    Do Facebook URL security concerns justify blocking social networks?
    Is there a way to block iPhone widgets that bypass Web filters?
    Should enterprises be concerned with Twitter in the workplace?
    Are there still Google Desktop security problems?
    Can an IP spoofing tool be used to spam SPF servers?
    Will an application usage policy best control network bandwidth?
    How can URL-shortening services be manipulated?
    Is my security program ready for Web application firewall deployment?
    How to ensure the security of a shopping cart application
    When to use the service features of the Metasploit hacking tool

    Software Development Methodology
    How to detect software tampering
    Developers Need Help with Security Errors
    Does an EULA make it truly illegal to decompile software?
    SQL injection continues to trouble firms, lead to breaches
    IBM acquires Ounce Labs for source code analysis
    Microsoft issues emergency Active Template Library updates
    Software security threats and employee awareness training
    Adobe patches ColdFusion vulnerability blocking website attack
    nCircle statistics show rising Web application vulnerabilities
    Common PCI questions: Web application firewalls or source code review?

    RELATED GLOSSARY TERMS
    Terms from Whatis.com − the technology online dictionary
    bypass  (SearchSecurity.com)
    Common Weakness Enumeration  (SearchSecurity.com)
    debugging  (SearchSoftwareQuality.com)
    fuzz testing  (SearchSecurity.com)
    heuristics  (SearchSoftwareQuality.com)
    sandbox  (SearchSecurity.com)
    threat modeling  (SearchSecurity.com)
    trigraph  (SearchSecurity.com)

    RELATED RESOURCES
    2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
    Search Bitpipe.com for the latest white papers and business webcasts
    Whatis.com, the online computer dictionary



    Search and Browse the Expert Answer Center
    Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
    Browse our Expert Advice



    Find Security Solutions for Your Business
    TechTarget Security Media
    Information Security View this month\\'s issue and subscribe today.
    Information Security Decisions Apply online for free conference admission.
    SearchSecurity.com
    HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Site Map




    All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
      TechTarget - The IT Media ROI Experts