Software Testing Methodology

AlexQin

AlexQin

How to Query response time ?
The turnaround time for responding to queries in a database must be short; therefor, query response time is essential for online transactions. The results from this test will help to identify problems, such as possible bottlenecks in the network, sspecific queries, the database structure, or the hardware.

AlexQin

What's Data integrity?
Data stored in the database should include such items as the catalog, pricing, shipping tables, tax tables, order database, and customer information. Testng must verify the integrity of the stored data. Testing should be done on a regular basis because data changes over time.
Data integrity tests
Data integrity can be tested as follows to ensure that the data is valid and not corrupt:

• Test the creation, modification, and deletion of data in tables as specified in the business requirement.
• Test to make sure that sets of radio buttons represent a fixed set of values. You should also check for NULL or EMPTY values.
• Test to make sure that data is save to the database and that each values gets saved fully. You should watch for the truncation of strings and that numeric values are not rounded off.
• Test to make sure that default values are stored and saved.
• Test the compatibility with old data. You should ensure that all updates do not affect the data you have on file in your database.
  

AlexQin

Data validity
The most common data errors are due to incorrect data entry, called data validity errors.

AlexQin

Recovery testing

• The system recovers from faukts and resumes processing within a predefined period of time.
• The system is fault-tolerant, which means that processing faults do not halt the overall functioning of the system.
• Data recovery and restart are correct in case of automatic recovery. If recovery requires human intervention, the mean time to repair the database is within predefined acceptable limits.
  

AlexQin

When testing a SQL server

• If the Web site publishes from inside the SQL Server straight to a Web page, is the data accurate and of the correct data type?
• If the SQL Server reads from a stored procedure to produce a Web page or if the stored procedure is changed, does the data on the page change?
• If you are using FrontPage or interDev is the data connection to your pages secure?
• Does the database have scheduled maintenance with a log so testers can set changes or errors?
• Can the tester check to see how back ups are being handled?
• Is the database secure?
  

AlexQin

When testing a Access database

• If the database is creating Web pages from the datbase to a URL, is the information correct and updated? If the pages are not dynamic or Active Server pages, they will not update automatically.
• If the tables in the database are linked to another database, make sure that all the links are active and giving reevant information.
• Are the fields such as zip code, phone numbers, dates, currency, and social security number formateed properly?
• If there are formulas in the database, do they work? How will they take care of updates if numbers change (for example, updating taxes)?
• Do the forms populate the correct tables?
• Is the database secure?
  

AlexQin

When test a FoxPro database

• If the database is linked to other database, are the links secure and working?
• If the database publishes to the Internet, is the data correct?
• When data is deployed, is it still accurate?
• Do the queries give accurate information to the reports?
• If thedatabase performs calculations, are the calculatons accurate?
  

AlexQin

Other important Database and security feature

• Credite Card Transaction
• Shopping Carts
• Payment Transaction Security
  

Secure Sockets Layer (SSL)
SSL is leading security protocol on the Internet.
When an SSL session is started, the server sends its publice key to the browser, which the browser uses to send a randomly generated secret key back to the server to have a secret key exchange for that session.
SSL is a protocol that is submitted to the WWW consortium (W3C) working group on security for consideration as a standard security hanhshake that is used to initiate the TCP/IP connection. This handshake results in the client and server agreeing on the level of security that they will use, and this will fulfill any authentication requirements for the connection. SSL's role is to encrypt and decrypt the byte stream of the application protocol being used. This means the all the inofrmation in both the HTTP request and the HTTP response are fully encrypted, including the URL the client is requesting, any submitted form contents (such as credit card numbers), anty HTTP access authorization information (user names and passwords), and all the data returned from the server to the client.

Transport Layer Security (TLS)
TLS is a majo security standard on the internet. TLS is backward compatible with SSL and use Triple Data Encryption Standard (DES) encryption.

AlexQin