False Positives & Managing G11n in Sync with Development

Similar documents
SOFTWARE TESTING TRAINING COURSES CONTENTS

SAP NetWeaver Application Server Add-On for Code Vulnerability Analysis

The following are two things that cannot be done with a lead until it has been converted to a prospect or account:

The AppSec How-To: Achieving Security in DevOps

How To Choose Help Desk Software For Your Company

Windchill Service Information Manager Curriculum Guide

Application Performance Monitoring of a scalable Java web-application in a cloud infrastructure

THE PATH TO AGILE LOCALIZATION

RESCO MOBILE CRM USER GUIDE. Access your CRM data on any mobile platform ipad, iphone, Android, Windows Phone or Win XP/Vista/7/8

SAFECode Security Development Lifecycle (SDL)

Braindumps.C questions

Managing Application Performance with JBoss Operations Network and OC Systems RTI

Integrated Error-Detection Techniques: Find More Bugs in Java Applications

Microsoft Modern ALM. Gilad Levy Baruch Frei

XpoLog Center Suite Log Management & Analysis platform

MySQL Enterprise Monitor

Business Application Services Testing

ASSURING SOFTWARE QUALITY USING VISUAL STUDIO 2010

Document Composition. Release Notes. Version: 5.4.0

How To Improve Your Software

Development Testing for Agile Environments

Sterling Business Intelligence

LDAPCON Sébastien Bahloul

SOLUTION OVERVIEW SmartELM - Smart Error & Log Management

Enterprise Service Bus

Keep managers better informed on their areas of responsibility and highlight the issues that require their attention with dashboards!

Forefront Client Security. Ronald Beekelaar Beekelaar Consultancy

SANS Dshield Webhoneypot Project. OWASP November 13th, The OWASP Foundation Jason Lam

What s New Guide. Help Desk Authority 9.1

Job Reference Guide. SLAMD Distributed Load Generation Engine. Version 1.8.2

IBM Tivoli Workload Scheduler Integration Workbench V8.6.: How to customize your automation environment by creating a custom Job Type plug-in

FogBugz & Kiln. Tools for Software Teams From the Makers of Stack Overflow and Trello. Fog Creek Software

A framework for creating custom rules for static analysis tools

JIRA Administration Best Practices

ElegantJ BI. White Paper. The Enterprise Option Reporting Tools vs. Business Intelligence

Instant Chime for IBM Sametime High Availability Server Guide

Open EMS Suite. O&M Agent. Functional Overview Version 1.2. Nokia Siemens Networks 1 (18)

Getting Started with STATISTICA Enterprise Programming

Bringing Value to the Organization with Performance Testing

HP Service Manager software

Lab: Application Lifecycle Management (ALM) Across Heterogeneous Platforms (Java/.NET)

Delivering Quality Software with Continuous Integration

Best Practices for Deploying Managed Self-Service Analytics and Why Tableau and QlikView Fall Short

Introduction to Agile Software Development Process. Software Development Life Cycles

a new generation software test automation framework - CIVIM

SysPatrol - Server Security Monitor

PTC Integrity Eclipse and IBM Rational Development Platform Guide

Tableau Server Trusted Authentication

How to Set Up and Use PeopleSoft Procurement and Supplier Contracts

Chapter 3 Authenticating Users

Profiling and Testing with Test and Performance Tools Platform (TPTP)

Basic Unix/Linux 1. Software Testing Interview Prep

Scribe Demonstration Script Web Leads to Dynamics CRM. October 4,

Cloudwords Drupal Module. Quick Start Guide

<Insert Picture Here> Oracle SQL Developer 3.0: Overview and New Features

CA Data Center Infrastructure Management r4.3: Administration Bundle

Securing Adobe connect Server and CQ Server

Software Construction

Application Note Windows 2008 and IBM Tape Diagnostic Tool (ITDT-GE)

Customer Timeline - New in Summer Web Lead Capture - New in Summer Built-In Dashboards - New in Summer 2012

<Insert Picture Here> Move to Oracle Database with Oracle SQL Developer Migrations

SAP Business Intelligence Suite Patch 10.x Update Guide

SAP HANA SPS 09 - What s New? Administration & Monitoring

TARGETPROCESS HELP DESK PORTAL

Test Automation Integration with Test Management QAComplete

WebSphere Business Monitor

SharePoint and Contract Management. Alan Weintraub Practice Director ECM Consulting (610) (office) (484) (Mobile)

Continuous Integration Comes to China.

Testing Tools Content (Manual with Selenium) Levels of Testing

Taking Control of your System and Planning Your Future: Real Time Monitoring

70-246: Monitoring and Operating a Private Cloud with System Center 2012

Software Development Kit

Monitoring HP OO 10. Overview. Available Tools. HP OO Community Guides

Vendor: Brio Software Product: Brio Performance Suite

Pattern Insight Clone Detection

Sage CRM 7.3 Release Preview

Introduction. Connection security

Agenda. Project Management Pain Points. Solution Option Highlights. The Dark Side. Discussion. Identify your business needs / requirements

End-To-End Invoice Processing Automation at Land O Lakes. Session #705. Natalie Hawley, Applications Developer

Overview of Web Services API

SmartPOS Advanced Point of Sales + ActiveMQ + SmartERP (Based in Adempiere) Sponsored by Rapid Corp L.L.C (U.S.A) Release Notes.

CRM SOFTWARE EVALUATION TEMPLATE

IBM WebSphere Cast Iron Cloud Integration

HP Business Process Monitor

Monitoring PostgreSQL database with Verax NMS

Application Note. UDO Archive Appliance and C2C Archive One

Entites in Drupal 8. Sascha Grossenbacher Christophe Galli

Automatic vs. Manual Code Analysis

Flexible Engineering Process Automation Process: Continuous Integration & Test

The Redesigned SAT. SAT Score Reporting Portal and Managing Access

User's Guide - Beta 1 Draft

Java Software Quality Tools and techniques

MicroStrategy Course Catalog

Transcription:

Continuous Globalization False Positives & Managing G11n in Sync with Development From Lingoport: Adam Asnes Michael Asnes May 10, 2016

Agenda False positives background Static Analysis vs. Testing Intro to Lingoport & Products Continuous Globalization Handling False Positives Demo o Code scanning, filtering and false positives management What s learned Q&A, Follow-up Resources

False Positives Test result which incorrectly indicates that a particular condition or attribute is present o Distracts from real issues o Can overwhelm results and usefulness o Source of friction when measuring a process for improvements #1 Objection!!! o Coverity VS. False Negative

Why False Positives 1. Software is complex 2. When you are measuring complex conditions that in some cases might be a problem and others not, you should expect false positives results 3. The degree to which you can control and manage false positives will have a strong effect on measurement usability

Example False Positive http://wiki.lingoport.com/false_positives SimpleDateFormat formatter =new SimpleDateFormat("MM/dd/yy"); String datestring = formatter.format(new Date()); Using the default Java rule sets, this code will raise i18n issues. If the datestring variable is user facing, this code is indeed an issue to be fixed (for more information, check your rule set help pages). However, if the datestring variable is used for internal purposes, such as a in a support log file, it should not be modified and is a false positive.

False Positives vs Issues Example False Positive: Here, the string message is sent only to a log file. It won t be user facing, and does not need to be internationalized. if (!file.exists()) { String message = "Cannot open resource. It's not a valid file or URL."; Util.getLogger().log(Level.SEVERE, message); } Example Issue: Here the string msg is first sent to a log file, then displayed to the user. It will need to be externalized for translation. catch (XMLStreamException e) { String msg = "Error retrieving servers capabilities " + serveruri; Util.getLogger().log(Level.SEVERE, msg, e); controller.showerrordialog(e, msg); }

Static Analysis Measuring conditions in source code, rather than having to actively test Code scanning, looking for specific conditions: o Bugs o Security o I18n o L10n Changes to the resource files in the code repository(s)

Defect costs per stage When most i18n & L10n issues are addressed Use static Analysis For i18n & L10n Traditional approach to SW Development in a well defined process

Static Analysis vs. Testing Do both! Testing requires that you hit all conditions to be measured Testing is by its nature an iterative loop o Code, test, fix, verify o Can take more time, more to manage, more manual processes o More human error or omission

Lingoport Suite Systems, automation & measurement to facilitate ongoing software internationalization and localization.

Lingoport Dashboard G11n visibility over multiple products and projects Drill down & Planning

Globalyzer Server: Customize and store Rules (no source access) Workbench: Big i18n jobs, Configure rules, i18n focus Lite: i18n check from developer IDE or automated check-in Command Line: Automate i18n measurement from the repo

Resource Manager See what s new in resource bundles Automate Prep Kits Automate file validation Automate sending files for Localization o Via TMS or L10n Vendor Portal Track it Validate it when it comes back Automatically insert it back in the repo if it passes Email notifications as well as dashboard instrumentation Automated Pseudo Localization

Continuous Globalization i18n & L10n in Every Sprint and Release

Continuous G11n

Continuous G11n in the Enterprise Automation Visibility Metrics

Minimizing False Positives Globalyzer Scope (test directory, external library files?) Filtering o Strings o Locale-sensitive methods, functions, classes o Programming Patterns o Static Files Ignores o Commenting o In the dashboard

False Positive Filtering Demo!

Rules vs Line Ignores

Lessons for the Enterprise Your development teams are moving fast Make i18n & L10n a measured & visible part of every sprint Tune your processes to gain valuable measurements and insight, while cutting out false positives

Questions & Answers: Contact Adam Asnes aasnes@lingoport.com Michael Asnes masnes@lingoport.com Resources lingoport.com/blog lingoport.com/resources wiki.lingoport.com http://www.lingoport.com Lingoport Suite Extensive Services Training training.lingoport.com

Question #1 What programming languages have the most issues?

Question #2 How much will I have to filter?

Question #3 Do I have to have a person dedicated to rules? How do I manage upkeep?