- Information
- AI Chat
Test heuristics cheatsheet Document
Computer Science and Engineering (CSE2001)
BMS College of Engineering
Recommended for you
Preview text
Test Heuristics Cheat Sheet
Data Type Attacks & Web Tests
Data Type Attacks
Long Name(>255 chars) Special Characters in Name(space *? / \ | < > ,. ( ) [ ] { } ; : ‘ “! @ # $ % ^ &) Non-ExistentAlready ExistsNo SpaceMinimal SpaceWrite- ProtectedUnavailableLockedOn Remote MachineCorrupted
Paths/Files
TimeoutsTime Difference between MachinesCrossing Time ZonesLeap Days Always Invalid Days (Feb 30, Sept 31)Feb 29 in Non-Leap YearsDifferent Formats (June 5, 2001; 06/05/2001; 06/05/01; 06-05-01; 6/5/2001 12:34)Daylight Savings ChangeoverReset Clock Backward or Forward
Time and Date
0 32768 (2 15 ) 32769 (2 15 + 1) 65536 (2 16 ) 65537 (2 16 +1) 2147483648 (2 31 )
2147483649 (2 31 + 1) 4294967296 (2 32 ) 4294967297 (2 32 + 1) Scientific Notation (1E-16) NegativeFloating Point/Decimal(0) With Commas(1,234,567) European Style(1.234,89) All the Above in Calculations
Numbers
Long (255, 256, 257, 1000, 1024, 2000, 2048 or more characters) Accented Chars (àáâãäåçèéêëìíîðñòôõöö, etc.) Asian Chars ( ) Common Delimiters and Special Characters( “ ‘ ` | / \ , ; : & < > ^ *? Tab ) Leave BlankSingle SpaceMultiple Spaces Leading SpacesEnd-of-Line Characters(^M) SQL Injection( ‘select * from customer ) With All Actions (Entering, Searching, Updating, etc.)
Strings
Web Tests
Back (watch for ‘Expired’ messages and double-posted transactions) RefreshBookmark the URLSelect Bookmark when Logged OutHack the URL(change/remove parameters; see also Data Type Attacks ) Multiple Browser Instances Open
Navigation
See also Data Type Attacks HTML/JavaScript Injection (allowing the user to enter arbitrary HTML tags and JavaScript commands can lead to security vulnerabilities) Check Max Length Defined on Text Inputs> 5000 Chars in TextAreas
Input
HTML Syntax Checker(validator.w3/) CSS Syntax Checker(jigsaw.w3/css-validator/)
Syntax
Preferences Javascript Off Cookies Off Security High Resize Browser Window Change Font Size
Violates Domain-Specific Rules (an ip address of 999.999.999, an email address with no “@”, an age of -1) Violates Uniqueness Constraint
General
Testing Wisdom
A test is an experiment designed to reveal information or answer a specific question about the software or
system. Stakeholders have questions; testers have answers .Don’t confuse speed with progress.Take a
contrary approach. Observation is exploratory. The narrower the view, the wider the ignorance. Big
bugs are often found by coincidence. Bugs cluster. Vary sequences, configurations, and data to increase
the probability that, if there is a problem, testing will find it.It’s all about the variables.
Copyright © 2006 Quality Tree Software, Inc.
qualitytree
This cheat sheet includes ideas from Elisabeth Hendrickson, James Lyndsay, and Dale Emery
Test Heuristics Cheat Sheet
Heuristics & Frameworks
Copyright © 2006 Quality Tree Software, Inc.
Heuristics
Goldilocks Too Big, Too Small, Just Right CRUD Create, Read, Update, Delete Perform a sequence of actions involving data, verifying the data integrity at each step.
(Example: Enter → Search → Report → Export → Import → Update → View)
Follow the Data
Identify “has a” relationships (a Customer has an Invoice; an Invoice has multiple Line Items). Apply CRUD, Count, Position, and/or Selectionheuristics (Customer has 0, 1, many Invoices; Invoice has 0, 1, many Line Items; Delete last Line Item then Read; Update first Line Item; Some, None, All Line Items are taxable; Delete Customer with 0, 1, Many Invoices)
Dependencies
Boundaries Approaching the Boundary (almost too big, almost too small) , At the Boundary
Interruptions Log Off, Shut Down, Reboot, Kill Process, Disconnect, Hibernate, Timeout, Cancel
Position Beginning, Middle, End (Edit at the beginning of the line, middle of the line, end of the line)
Starvation CPU, Memory, Network, or Disk at maximum capacity
Selection Some, None, All (Some permissions, No permissions, All permissions)
Violate constraints (leave required fields blank, enter invalid combinations in dependent fields, enter duplicate IDs or names). Apply with the Input Methodheuristic.
Constraints
Multi-User Simultaneous create, update, delete from two accounts or same account logged in twice.
Varying the variables related to configuration (Screen Resolution; Network Speed, Latency, Signal Strength; Memory; Disk Availability; Count heuristic applied to any peripheral such as 0, 1, Many Monitors, Mice, or Printers)
Configurations
Sorting Alpha v. NumericAcross Multiple Pages
Sequences Vary Order of OperationsUndo/RedoReverseCombineInvertSimultaneous
Input Method Typing, Copy/Paste, Import, Drag/Drop, Various Interfaces (GUI v. API)
Frameworks
Variable Analysis Identify anything whose value can change. Variables can be obvious, subtle, or hidden.
Identify states and events/transitions, then represent them in a picture or table. Works with the Sequencesand Interruptionheuristics.
State Analysis
Map Making Identify a “base” or “home” state. Pick a direction and take one step. Return to base. Repeat.
The objects or data in the system and the ways in which the system manipulates it. Also, Adjectives (attributes) such as Visible, Identical, Verbose and Adverbs (action descriptors) such as Quickly, Slowly, Repeatedly, Precisely, Randomly. Good for creating random scenarios.
Nouns & Verbs
Inconsistencies, Absences, and Extras with respect to Internal, External – Specific, or External – Cultural reference points. (James Lyndsay, Workroom Productions)
Judgment
Users & Scenarios Use Cases, Soap Operas, Personae, Extreme Personalities
Identify any public or private interface that provides visibility or control. Provides places to provoke, monitor, and verify the system.
Touch Points
Deming’s Cycle Plan, Do, Check, Act
Observations Input/Output/Linkage (James Lyndsay, Workroom Productions)
Count 0, 1, Many (0 transactions, 1 transactions, Many simultaneous transactions)
Flow Input/Processing/Output Requirements Users/Functions/Attributes/Constraints (Gause & Weinberg Exploring Requirements )
Flood Multiple simultaneous transactions or requests flooding the queue.
qualitytree
This cheat sheet includes ideas from Elisabeth Hendrickson, James Lyndsay, and Dale Emery
Test heuristics cheatsheet Document
Course: Computer Science and Engineering (CSE2001)
University: BMS College of Engineering
