ATA Pune Meetup is back again

Here is the tentative agenda for our ATAPune Community Full day meetup:

9:30 AM to 10:00 AM - ATA Pune Chapter Introductions and 2019 vision - by Amol Deshpande (BMC) - President ATA Pune Chapter

10:00 AM to 1:00 PM  (includes tea break)-  Behavior Driven Testing for Angular Apps using Protractor by Nabin Ghosh & Aliasgar Chaiwala from Capita  - (Details are below)   

1:00 PM - 2:00 PM Lunch

2:00 PM to 3:00 PM - Machine Learning and Data Science for Leaders/Managers - by Anand Vyas (Agile Testing Alliance)

3:00 - 5:30 PM  (includes a tea break) - DevSecOps - Automating Security Testing !!! by Avishkar Nikale and Abhay Kumar Singh - LTI)

5:30 PM - Closure and felicitations.

Please note that the sessions are hands on session and will require you to carry your own laptop. (Minimum 4GB RAM / Windows ) 

There are limited 20 Seats in this meetup - offered on FCFS basis.

Details on the session are 

Session 1 Details :

Behavior Driven Testing for Angular Apps using Protractor by Nabin Ghosh & Aliasgar Chaiwala (Capita)

Protractor is an end-to-end testing framework for AngularJS applications and works as a solution integrator - combining powerful tools and technologies such as NodeJS, Selenium, webDriver, Jasmine, Cucumber and Mocha. Protractor allows tests to be organized based on Jasmine, thus allowing to write both unit and functional tests on Jasmine. Jasmine helps to create specs based on the behavior of the application. This is great for unit tests but is not be the preferred for all team members such as Business facing users/Product Owners. In BDD, we write the acceptance tests in way that anyone in the team can read and understand the test. The business facing users generally want to see the high-level view of the what the test suite is doing without going into the implementation details. This is where Cucumber comes in picture. Cucumber is a BDD framework that focusses on behavior. The entry point to a cucumber test is a feature file. It describes the test in a descripted language (like English). This ensures the acceptance tests can easily be read and written by any team member. These feature files serve as living documentation as it mimics the format of user stories using Gherkin. The steps in the feature files are mapped to step definition which is mapping business readable language to implementation code. 

In this session, we will cover protractor, jasmine and Cucumber. The framework will be using typescript which has various advantages over JavaScript like support for classes, syntax like Object Orient languages such as java, static type checking, etc.,

The framework will be integrated to a Continuous integration system. Jenkins is a popular open source tool for continuous integration and build automation. It has a lot of flexibility like highly configurable system, support for community developed plugins, limitless possibilities by combining Jenkins with tools like maven, ant, etc., Jenkins basically does the job of executing a predefined list of steps. The trigger for the execution can be time or event based. For example, run the API test on every check-in, Run the UI test every night at 22:00, etc., Jenkins also monitors the step execution and allows to stop the process. if any steps fail, Jenkins can also send out notification in case of a build success or failure.

Session 3 Details :

DevSecOps - Automating Security Testing - by  Avishkar Nikale and Abhaykumar Singh (LTI)

Synopsis
Session will be hands on session on doing Security Testing in the DevOps world. Shift Left of Security testing in the entire DevOps Pipeline - DevSecOps..

Need of DevSecOps
When was the last time you were hoping to open a port on a server and thought about the ramifications of the same ? When was the last time when you decided to setup a new file transfer said, "Hmm .. I better write a Security Test acceptance criteria first for my stories/tasks" ?
For many of us the Security Tester is a mythical creature who might turn up at dusk and at dawn send us a PDF report. For some of us who work in Scaled Agile Framework (SAFe) she/he might be loaned to us from the Shared Services. There is an urgent need to free up our security experts and shift left basic security tests through automation. We also need to integrate Security testing in our CI/CD pipeline for early detection and early fixes. Ultimately for our users, business sponsors, shareholders and last but not the least for the pride which we put in our work, it doesn't matter where the weak link is .... it ultimately hurts us all.

Outline/structure of the Session
•    Why Automate Security Tests
•    The Rugged Manifesto
•    The Cultural Shift for Shift Left Security
•    Demo of a few tools (like Arachni, Gauntlt etc.)
•    First Steps towards Automating Security tests

Learning Outcome
•    Learn about what cultural changes you need to Shift Left Security
•    Focus on security right from onset
•    Automate your security tests
•    Learn what tools will suit your needs

Target Audience
Security Testers/Analysts,developers 

Prerequisite
•    Some familiarity with Docker, Git & command line
•    Continuous Integration & Continuous Delivery
•    OWASP Top 10

===============================================================================================