Insight and analysis from thought leaders in agile development and testing, DevOps, security, test automation, and more.
Welcome to the first part of an ongoing series I’m calling DevOps in a Regulated and Embedded Environment. This first part looks at the particular challenges posed by a particular embedded environment. Future posts will dig into the details of how the more interesting problems were solved and what we should have done differently given […]
Setting up a load balancer in Azure is a simple process, the tricky part is all of the prerequisites and dependencies that need to be met in order for two or more virtual machines to be load balanced. The first and most important dependency is creating an Availability Set for your virtual machines to live […]
Whether you like it or not, Spring MVC is by far the the most popular and used web framework for Java. It is important to recognize this popularity and its reputation. It’s one of the most favored framework by federal agencies because the fact that it is Java-based means “enterprise-ready” and that carries a lot […]
Disclaimer: I have no intention of detailing how the box was exploited, with a map of how to break this system again. I intend to show the methods used to discover and trace the breach throughout the server. Welcome to part 3 of 3 of my Forensics Analysis blog. Following the first 2 parts of […]
Amazon S3 (Simple Storage Service) is a handy tool for online file storage that is often used when setting up VMs. While transferring data between availability zones in Amazon Web Services (AWS) is a trivial task, transferring S3 buckets from AWS to AWS GovCloud requires a greater challenge. In order to start, you’ll need a […]
Why bother starting Jenkins in neutral? Jenkins can be a dangerous virtual machine to bring up. This situation arises when I’m recovering one, cloning one, or testing provisioning automation. The damage one can cause is hard to predict because it depends on exactly what yours does, but I’ll try to paint a couple common pictures […]
Agile has increasingly become the standard way software development organizations deliver software. According to a recent TechBeachon survey, most organizations lean toward agile or purely rely on it for their software delivery. For a majority of government projects, waterfall methodologies continue to be heavily used with large amounts of process governance and controls. While the government […]
Great news. I’ll be talking in Chicago on September 19th at the Agile Testing and Test Automation Summit 2016. I’ll be discussing different testing frameworks, with a focus on the team based decision to choose the correct one. Be sure to register if you’re in the area for the conference, as it’s sure to be […]
I’m currently working on a project where we are migrating from SVN to Git. There are a bunch of large applications with fairly complicated build processes that are going to have to be adjusted as we transition from SVN to Git. Because of this, I cannot easily just “import code and throw the switch” to […]
In addition to Ant support, the Secure Testing Framework now has included Gradle support! In the latest release of the Secure Testing Framework, you will see that there is an example build.gradle and gradle.properties included in the repository. In the build.gradle the first thing I’d like to call attention to is the first line: apply […]
