Welcome!

Open Source Cloud Authors: Zakia Bouachraoui, Elizabeth White, Liz McMillan, Yeshim Deniz, Pat Romanski

Related Topics: Microservices Expo, Java IoT, Microsoft Cloud, Open Source Cloud, @CloudExpo, SDN Journal

Microservices Expo: Blog Feed Post

Emerging Trends and Software Quality Assurance

The standard software quality activities defined by IEEE are integrated into the software development cycle

The future challenges for Software Quality assurance (SQA) follow a few software trends, including:

  • Complex and large software packages
  • Integration with external components and interfaces
  • The need to deliver quickly
  • The need to deliver bug free software

The standard software quality activities defined by IEEE, such as verification and validation, are integrated into the software development cycle. We see dedicated SQA roles and resources in major organizations. Also, many multi-national companies are pushing to have a central team drive and manage the quality processes, methodologies, and tools across all their sites and teams.

CAST-software-quality-software-risk-codeThe center of excellence is an example of such a central team, which are focused on defining and driving SQA activities, process, methods, and tools within the organization. They introduce specific software metrics to measure their key process areas (KPAs) at every phase of the software development life cycle. The main idea is to reduce cost of software production and quality, and therefore improve the overall productivity.

With the emerging software system architecture which is mainly oriented around mobile, cloud or SaaS, the need to better understand, manage, and adopt the SQA activities is increasing.

Organizations have started to understand, define, and implement quality models which are specific and relevant to their line of business. There is a strong push to study and apply the appropriate quality model, which could be based on either a standard model such as McCall's factor model, or a specific quality model to address few quality requirements such as security or reliability within every organization. For example: The McCall's factor model classifies all software requirements into eleven software quality factors. These eleven factors are grouped into three categories as follows (Galin, 2004):

  • Product operation factors: Correctness, Reliability, Efficiency, Integrity, Usability.
  • Product revision factors: Maintainability, Flexibility, Testability.
  • Product transition factors: Portability, Reusability, Interoperability.

There are few challenges in terms of adoption of these processes, methodologies, and tools mainly due to the following reasons:

  • Multiple development sites - This challenge is pretty common because the processes working at one site may not work at another site due to several reasons, including lack of resources, not enough expertise on process, not sharing the same priority, etc.
  • Integration of many external components or third parties - Today many organizations promote the use of external components or open source software within their development teams, and forget to anticipate the risks around testing them and getting them the proper support.
  • Not enough standards for software requirements - Although we have seen many standards defining processes including the CMM, CMMI, and ISO, when it comes to quality requirements, we see a lack of software quality standards. There are many institutes which focus on specific areas of software like security, networking, accessibility, and performance.
    • Examples of such institutes are Mitre Corporation, which has defined the popular security vulnerabilities which must be tackled by every software system. They are referred to as Common Weakness Enumeration (CWE). You can find more information at http://cwe.mitre.org/top25/
    • The evolving CISQ standards for software systems led by Object Management Group (OMG). The first version of the CISQ standard was published last year. The CISQ requirements are mainly based on four key quality characteristics - reliability, performance and efficiency, security, and maintainability. You can find more information at http://it-cisq.org/standards-page/
  • Not enough support from management in terms of strategy for SQA processes - There are organizations which still need to mature in terms of defining and implementing the right SQA for their business. They tend to fail due to lack of focus on quality processes.For example, organizations which compromise on testing by reducing or skipping non-functional testing, system testing, or integration testing may face issues in terms of dependencies or other problems linked to environment and platform, security, and performance, which are very critical for business to run smoothly.

The advantages of overcoming the challenges described above include process improvement, optimization, and higher productivity.

The use of standard SQA processes (based on Capability Maturity Model or Testing Maturity Model) should be recommended to develop an efficient SQA function within the organization. And the requirements of test automation should be promoted and enforced.

Based on experience, I would strongly recommend introducing static and dynamic code analysis as part of the QA activities to detect major violations early in the development phase. For example: There are many SCA tools such as CAST Application Intelligent Platform, Fortify, and Coverity which can be integrated into the daily or weekly software development testing activities.

This will have a positive impact on the overall productivity and quality of the software delivered.

Conclusion
Be it on-premise, on-demand, on-mobile, or on-cloud the requirements will evolve. Therefore we have to align the SQA process and tools to better suit these requirements. The software development team is still in charge or responsible for ensuring the quality of the system he is delivering to the market.

No matter which process we try to adopt or follow, as humans we need time to coach ourselves and practice the new process before we can really become the process champions.

Read the original blog entry...

More Stories By Lev Lesokhin

Lev Lesokhin is responsible for CAST's market development, strategy, thought leadership and product marketing worldwide. He has a passion for making customers successful, building the ecosystem, and advancing the state of the art in business technology. Lev comes to CAST from SAP, where he was Director, Global SME Marketing. Prior to SAP, Lev was at the Corporate Executive Board as one of the leaders of the Applications Executive Council, where he worked with the heads of applications organizations at Fortune 1000 companies to identify best management practices.

IoT & Smart Cities Stories
The challenges of aggregating data from consumer-oriented devices, such as wearable technologies and smart thermostats, are fairly well-understood. However, there are a new set of challenges for IoT devices that generate megabytes or gigabytes of data per second. Certainly, the infrastructure will have to change, as those volumes of data will likely overwhelm the available bandwidth for aggregating the data into a central repository. Ochandarena discusses a whole new way to think about your next...
CloudEXPO | DevOpsSUMMIT | DXWorldEXPO are the world's most influential, independent events where Cloud Computing was coined and where technology buyers and vendors meet to experience and discuss the big picture of Digital Transformation and all of the strategies, tactics, and tools they need to realize their goals. Sponsors of DXWorldEXPO | CloudEXPO benefit from unmatched branding, profile building and lead generation opportunities.
DXWorldEXPO LLC announced today that Big Data Federation to Exhibit at the 22nd International CloudEXPO, colocated with DevOpsSUMMIT and DXWorldEXPO, November 12-13, 2018 in New York City. Big Data Federation, Inc. develops and applies artificial intelligence to predict financial and economic events that matter. The company uncovers patterns and precise drivers of performance and outcomes with the aid of machine-learning algorithms, big data, and fundamental analysis. Their products are deployed...
All in Mobile is a place where we continually maximize their impact by fostering understanding, empathy, insights, creativity and joy. They believe that a truly useful and desirable mobile app doesn't need the brightest idea or the most advanced technology. A great product begins with understanding people. It's easy to think that customers will love your app, but can you justify it? They make sure your final app is something that users truly want and need. The only way to do this is by ...
Digital Transformation and Disruption, Amazon Style - What You Can Learn. Chris Kocher is a co-founder of Grey Heron, a management and strategic marketing consulting firm. He has 25+ years in both strategic and hands-on operating experience helping executives and investors build revenues and shareholder value. He has consulted with over 130 companies on innovating with new business models, product strategies and monetization. Chris has held management positions at HP and Symantec in addition to ...
Dynatrace is an application performance management software company with products for the information technology departments and digital business owners of medium and large businesses. Building the Future of Monitoring with Artificial Intelligence. Today we can collect lots and lots of performance data. We build beautiful dashboards and even have fancy query languages to access and transform the data. Still performance data is a secret language only a couple of people understand. The more busine...
Cell networks have the advantage of long-range communications, reaching an estimated 90% of the world. But cell networks such as 2G, 3G and LTE consume lots of power and were designed for connecting people. They are not optimized for low- or battery-powered devices or for IoT applications with infrequently transmitted data. Cell IoT modules that support narrow-band IoT and 4G cell networks will enable cell connectivity, device management, and app enablement for low-power wide-area network IoT. B...
The hierarchical architecture that distributes "compute" within the network specially at the edge can enable new services by harnessing emerging technologies. But Edge-Compute comes at increased cost that needs to be managed and potentially augmented by creative architecture solutions as there will always a catching-up with the capacity demands. Processing power in smartphones has enhanced YoY and there is increasingly spare compute capacity that can be potentially pooled. Uber has successfully ...
SYS-CON Events announced today that CrowdReviews.com has been named “Media Sponsor” of SYS-CON's 22nd International Cloud Expo, which will take place on June 5–7, 2018, at the Javits Center in New York City, NY. CrowdReviews.com is a transparent online platform for determining which products and services are the best based on the opinion of the crowd. The crowd consists of Internet users that have experienced products and services first-hand and have an interest in letting other potential buye...
When talking IoT we often focus on the devices, the sensors, the hardware itself. The new smart appliances, the new smart or self-driving cars (which are amalgamations of many ‘things'). When we are looking at the world of IoT, we should take a step back, look at the big picture. What value are these devices providing. IoT is not about the devices, its about the data consumed and generated. The devices are tools, mechanisms, conduits. This paper discusses the considerations when dealing with the...