The Perfect Storm: Mobile Application Quality

K3
Keynote

4/16/2015
8:30
AM

"The Perfect Storm: Mobile
Application Quality"

Presented by:
Jeffery Payne
Coveros, Inc.

Brought
to
you
by:

340
Corporate
Way,
Suite
300,
Orange
Park,
FL
32073

888-‐268-‐8770
·∙
904-‐278-‐0524
·∙
sqeinfo@sqe.com
·∙
www.sqe.com

Jeffery Payne
Coveros, Inc.
Jeffery Payne is CEO and founder of Coveros, Inc., a software company that
builds secure software applications using agile methods. Since its inception in
2008, Coveros has become a market leader in secure agile principles and was
recognized by Inc. magazine as one of the fastest growing private US
companies. Prior to founding Coveros, Jeffery was chairman of the board, CEO,
and cofounder of Cigital, Inc., a market leader in software security consulting.
Jeffery has published more than thirty papers on software development and
testing, and testified before Congress on issues of national importance, including
intellectual property rights, cyber terrorism, and software quality. Follow Jeffery
on Twitter @jefferyepayne.

1© Copyright 2015 Coveros, Inc.. All rights reserved.
The Perfect Storm:
Mobile Application Quality
Jeffery Payne
Chief Executive Officer, Coveros Inc.
jeff.payne@coveros.com
@jefferyepayne
Coveros helps organizations accelerate the delivery of
secure, reliable software
Our consulting services:
– Agile software development
– Agile coaching & improvement
– Agile testing & automation
– Secure agile development
– DevOps
Agile training
– Agile Fundamentals (ICAgile)
– Agile Testing (ICAgile)
– Agile Test Automation (ICAgile)
– Security Testing
– Mobile Testing
– DevOps
About Coveros
Areas of Expertise

Agenda
What is going on out there?
The perfect storm
Mobile application quality
Getting ahead of the curve
Convergence of technology

Technology adoption
Social aspects of mobile
Fear of losing your phone is called Nomophobia.
– Half the world has it.
It takes 26 hours for the average person to report
a lost wallet …
– and 68 minutes to report a lost phone.
We use our phones for many things:
– 56% of time spent in applications
– 19% of time spent in email/msgs
– 15% of time spent on phone

A world-wide phenomena
USA
– 51% use phones in bed
– 23% use phones during
meetings and class
UK
– 22% of adults use their
phone in the bathroom
– 37% of adults admit they
are addicted to their
phone
Russia
– 154% market penetration
Mobile Apps: The Perfect Quality Storm
The Diamond of Danger
Usability
Performance
Security Compatibility
The Perfect
Quality
Storm

Usability
Screen size / colors
Adaptive/responsive design
Emphasis on usability often forgets beauty
Emphasis on beauty often forgets usability
Device specific features (Accelerometer, GPS,
touchscreen)
“A product gets uglier if it doesn’t meet user needs.”
Compatibility
Devices
OS’s
Versions (Devices, OS,
Apps)
Browsers
Networks
Data storage

Performance
Mobile users expect real-time response and performance
– 40% of mobile application users will abandon an app if load time
is >3 seconds – KISSmetrics
– 51% of online shoppers in the US say that slowness is the top
reason they’d abandon a purchase -- Radware
– The abandonment rate for mobile shopping carts is 97%,
compared to 70-75% for desktop carts – Radware
– For iOS, 98-99% of response time happens after HTML arrives at
the client application
Security
Mobile devices have a radically different threat profile
than our computers do
– We leave them laying around without strong authentication
– We download untrusted applications without blinking an eye
– Mobile security models on devices are complicated and unique
to each platform
– Devices storage mechanisms aren’t very secure
We perform business-critical operations on mobile apps
residing on devices we often leave in the bathroom

Achieving Mobile
Application Quality
Effective Usability Testing
Leverage usability checklists
“A Usability Checklist for the Usability Evaluation of
Mobile Phone User Interface”
-- Yong Gu Ji, Jun Ho Park, Cheol Lee, Myung Hwan Yun
Test your application on
actual users … and you
don’t need many!
User Experience Design
85%

Effective Compatibility Testing
Know your customer and market trends
Know your customer and market trends

Leverage emulators, simulators, cloud platforms
Effective Performance Testing
Factor in networks
– 2G, 3G,4G LTE, EDGE, WiFi, Airplane Mode
– Switching across networks
– Roaming
UI issues
Performance is not just a device issue …. it’s a software
issue
– Integrate profiling and performance testing into Sprints/iterations
– Test subsystem performance when implemented
– Don’t wait until the end!

Effective Performance Testing (cont.)
Low resources
– Optimization Modes
– Power saving Modes
– Variable Battery Levels (Full, Low, Critical, Charging)
– Memory/CPU utilization
– Launch, Background, Foreground, Exit
– Simultaneous Applications utilization
– Continuous Keypad entry (across various keypad controls/events)
– Memory Sweeping
– Storage Space
– Installation
– Application Utilization
– Battery Consumption
Use emulators / simulators to ease this process
Effective Security Testing
Focus on privacy first
– Screen snapshots are not your friend!
– Protect your data on the back-end
You will have to cover all of your security bases
– Web, legacy, privacy, malicious code, viruses/worms,
platform/configurations, operating systems
Use risk analysis and an understanding of where your
“crown jewels” reside to focus your efforts
Understand your device and security model very well!

Putting It All Together
Getting Smarter
Coveros Labs (www.coveroslabs.com)
– Secure mobile development
– Malicious code analysis
– Cloud security
– Active Authentication
OWASP (www.owasp.org)
– Mobile testing
– Web testing
– Free tools
Mobile App Security

Questions?
Thank You
Contact Information:
Jeffery Payne
Coveros Inc.
@jefferyepayne

The Perfect Storm: Mobile Application Quality

Recommandé

Recommandé

Contenu connexe

Plus de TechWell

Plus de TechWell (20)

Dernier

Dernier (20)

The Perfect Storm: Mobile Application Quality