Join the SAO's QA Forum for another dynamic lunch program, to learn about the Open Web Application Security (OWASP) Testing Guide v3 and how to verify the security of your running applications. This is a great opportunity to network with a great local speaker (Mike Hryekewicz, Software Engineer V, Standard Insurance Company) and industry peers and to find out about Oregon job openings and upcoming community events.

OWASP Testing Guide describes a set of techniques for finding different kinds of security vulnerabilities within an application. This technique is used by testers and developers to help produce secure code and to supplement security reviewers application assessment efforts.

This presentation will provide an overview of the guide, a road map for where it is heading in the next release, and guidance for how it can be applied in the business of producing secure software solutions.

Who should attend? Anyone interested in Web Application Security, including management, security professionals, developers, students, etc..

Agenda 11:00am Doors open 11:00am-11:30am Registration, networking and lunch 11:30am Welcome & Community Announcements 11:45am Program starts 12:50pm Final questions 1:00pm Program ends

Good business decisions require relevant and valid information. Deciding what information is relevant can be challenging – especially as organizations transition to Agile development and project management methods. This presentation will explore ways to use the Goal-Question-Metric (GQM) technique to inform good decisions by identifying some relevant reporting measures when applying the Agile scrum methodology.

Agile teams value working software over comprehensive documentation. Teams deliver working software in short, iterative releases of business value rather than larger releases of longer duration. This increases the need to make quick decisions and the need for relevant and timely information. GQM provides a goal-driven way to identify the information our stakeholders really need.

This presentation will walk through using GQM, look at examples of applying it, review some relevant Agile measures and discuss relevant measures for different stakeholders. Audience participation is expected.

Cloud computing has become a big topic in the IT industry. Bolstered by inexpensive, available platforms, tools and support, more and more business are seeing the advantages and moving applications to "cloud” environments. As this transformation takes place, how does it change the way QA / Testing professionals approach verifying and validating that applications meet functional and non-functional requirements? What should QA be looking for in terms of performance, integration and security? What kinds and amount of testing will vendors be looking for before they accept an application into their environment? How much and what kind of testing will the hosting vendor perform before they allow an application to go "live”.

In this event a panel of experts from different companies focusing on cloud applications, will provide their perspectives and discuss questions and views posed by the attendees. This will be an interactive discussion – taking a deep dive into the topic and providing a forum for attendees and speakers to share insights and experiences. The intention is to raise awareness and knowledge and provide attendees an understanding of the key issues and approaches when their company considers moving applications to a cloud-based environment.

Bring your questions and/or experiences and be prepared for a great event.

Meet the Moderator Greg Lueck, Managing Partner, Centerstance

Meet the Presenters Lalli Varadh, Sr. Director, Quality Engineering, Salesforce.com

Rich Bader, President and Chief Executive Officer, EasyStreet Online Services, Inc.

Mike Kellis, Vice President and Chief Operations Officer ClaimVantage, Claim Process Management Software

Mark Gibson, Quality Assurance Engineer, Centerstance

Generally acknowledged best practices for software development strongly favor co-location, but with mergers, acquisitions, outsourcing, and off-shoring the co-located team is becoming an endangered species. Teams now are commonly project-based and geographically distributed. How can we work effectively with team members in different physical locations?

Learn from key open source leaders that with the help of virtual teams produce some of the highest quality, most widely used software today. Come prepared to speak your mind, share your experience, listen and learn about working in a virtual team. If you are involved anywhere in the software development lifecycle, this event is for you.

What is an Unconference?

An Unconference is the inverse of a conference, in that there’s no predetermined, pre-set schedule, agenda, or speaker lineup. Utilizing the concept of OpenSpace, this unconference is the coming together of participants, with no predetermined agenda or program, to have an open discussion and share insight in a place where experts and beginners are equal. You won't be lectured at, rather you'll leave with a better understanding of a topic and the satisfaction of being heard outside Q&A time.

The OpenSpace methodology is carefully designed to elicit maximum involvement and creativity in a constructive atmosphere. It is also highly flexible so that the content is entirely determined by you -- the participants. This is not to suggest that the conference will not have content or outcomes, for there certainly will be both. Achievement in the meeting will be totally dependent upon individual and collective responsibility to make it happen. The content is what each person shares, and the outcome is what we will all create. The event will be inventive, creative, productive and full of surprises.

Capacity: 160 attendees

Audience: From executives whom are concerned with productivity, quality and cost management to product owners, analysts, developers, designers, and testers all who are attempting to share a single thought and build upon it.

Tickets | Volunteer