Name: Tackling Safety & Security for Avionics Software
Start: 2021-09-10T20:31:00Z
End: 2021-09-10T21:26:05.000Z
Location: BrightTALK
Rating: 0

Panel Discussion 
DevOps bridges the gap between software development and operations, but connecting these practices exposes new gaps and risks. When DevOps goes awry, you may have Dev-Oops instead! You’re left to deal with unintended issues due to immature processes and siloed organizations. 

In this panel discussion, we’ll discuss the common pitfalls organizations are vulnerable to when implementing DevOps across their projects and how to avoid them. 

Gain insights about:  
• How organizations define and implement DevOps. 
• Dev-Oops issues & pitfalls and how to avoid them. 
• Delivering on DevOps with best practices for continuous testing in CI/CD.

From Dev-Oops to DevOps: Transform to an Agile Workflow for Continuous Testing

Many software developers will agree that, although unit testing is extremely valuable to help find and fix issues in code, it’s time intensive and tedious to design and maintain useful unit tests to cover the entire application. Test automation enables you to save time and effort creating and maintaining meaningful JUnit tests, gain a better understanding of test coverage, and deliver a high-quality application that meets expectations. 

In this technical session, we’ll demonstrate the benefits of unit testing and show you how to capture and centralize JUnit test execution and coverage results within the CI/CD pipeline across the organization.

Learn how to: 
• Quickly create JUnit tests with mocks and assertions to improve code quality and increase code coverage. 
• Identify coverage gaps and analyze key metrics such as modified code coverage to evaluate the business impact and risk. 
• Obtain near-instant feedback to mitigate code changes in the CI/CD pipeline using test impact analysis (TIA).

Save Time & Improve Quality on the Fast Path for JUnit Testing

Developing safety-and security-critical software isn't easy, especially for life-saving medical devices. Not to mention the challenge of ensuring your software is compliant for IEC 62304 and other FDA regulations like 510K for medical devices.  

Join this discussion to discover how to cut the cost of achieving certification for Class I, II, and III devices by automating multiple testing methods required by the standard to save time and effort. We'll discuss:

• Exploring the IEC 62304 standard and related secure coding standards. 
• Using static analysis, unit testing, code coverage for medical devices. 
• Incorporating regulatory safety & security requirements into the SDLC.

How to Tackle Software Regulatory Compliance for Medical Devices

How to Build a Better Test Environment

Leading companies like ING and Bank of America are deploying software quality initiatives with an eye on implementing more efficient processes and approaches. Test automation has moved DevOps teams in the right direction but dealing with the constraints of downstream dependencies presents its own challenges. Service virtualization makes it possible to mimic those dependent services and endpoints within the test environment, eliminating bottlenecks and enabling testing to continue unhindered. 

In this session, Raymond Smit, IT Chapter Lead of ING, and Istiak Ahmed, SVP - Software Quality Assurance Manager of Bank of America, share key elements that drove improved efficiency with performance results validated by QA Vector Analytics benchmarks. You’ll see how the use of service virtualization—either from a standing start or transitioning vendors—adds efficiency to testing and development processes. 

Learn how to: 
• Deploy infrastructure to improve replication of end-to-end production journeys. 
• Provision virtual test data and environments for continuous API testing. 
• Apply effective performance benchmarks to demonstrate efficiency improvements.

How ING & Bank of America Improved Software Quality & Accelerated Delivery

Customers expect a seamless omni-channel experience across web and mobile apps and services. Quality issues drive away customers. Fast. If your software doesn’t work as expected, users won't hesitate to find a different solution. A flawless customer experience is a primary deliverable for high-quality software, and it can't be achieved with traditional web UI testing alone. 

Essential to delivering continuous quality is test automation, smarter AI, and an end-to-end testing approach that includes API testing and gives testers complete control of their environment with service and data virtualization. There's one more critical component: visibility into key metrics along the way.  

If you can't measure it, you can't manage it. Key metrics, like escaped defects, can provide insights into potential risk areas. Teams can make smart choices about what tests to run to achieve the desired code and test coverage. By analyzing test results, you can optimize your Agile workflow to focus on your top priorities for a high-quality delivery. 

In this session, guest speaker Diego Lo Giudice of Forrester Research will share market trends and insights, while Roya Montazeri of Cox Automotive describes her approach to implement virtualization to achieve defect reduction for improved customer satisfaction. 

Key Takeaways 
• Understand the importance of smart end-to-end testing. 
• Define metrics that matter and align with quality goals.  
• Use data to discover what testing is needed based on changes. 
• Manage testing processes and environment to achieve your goals.

Deliver Superior Experiences With End-to-End Testing & Metrics That Matter

Shifting integration testing left is often difficult due to shared backend services and resources. Teams that share testing data sources and environments may struggle with delays, conflicts, and data pollution. Traditional test data management (TDM) doesn’t get the job done and teams need more control over their test data and environments. 

Discover how your team can move toward continuous testing in your Agile environment. Reduce wait time for valid test data by enabling on-demand virtual environments within your DevOps workflow.  

Join this session and learn how to: 
• Automate TDM workflows with an environment-based approach to continuous testing that scales across the enterprise. 
• Simulate stateful data journeys to further reduce teams’ reliance on shared backends and shift-left integration testing. 
• Develop virtual sandboxes to enable teams to isolate their applications from shared backends.

TDM for the Win: How Test Data Management Enables Continuous Testing

The user experience for web applications is critical. If your application’s user interface isn't fully tested, it likely won't work as expected and your customers may seek another option. But UI testing only goes so far. It can’t validate the full functionality of the software. 

Most user experiences in today’s applications are a fancy frontend that calls numerous backend APIs or services. To increase UI testing efficiency and ensure proper operation, you need to add API testing to your workflow. API tests run faster and provide more comprehensive testing for the overall functionality of the application. You can also address corner cases more effectively to verify functionality under multiple conditions. 

Key takeaways: 
• Test web UI browser-based applications faster and more reliably with AI-driven record and playback. 
• Use recordings to create no-code API tests for better application coverage and shorter testing cycles. 
• Easily convert UI tests to intelligent API tests to optimize test execution.

When UI Testing Hits the Wall, Break Through With API Testing

It’s imperative to ensure that your applications function correctly to ensure a successful customer experience, but the complexities of APIs and microservices make software testing more challenging than ever. Virtual test environments make it easier to isolate dependencies and enable more thorough testing. 

The recent World Quality Report by Sogeti confirms test environment management (TEM) is top-of-mind for organizations that want to improve their quality efforts. The availability of portable virtual deployments enables continuous testing to reach quality goals at a faster rate with lower costs. This session will describe examples and experiences of how different industries are implementing the next level of TEM. 

Key Takeaways 
• Understand the value of TEM for a continuous testing process.  
• Gain insights on ways to implement TEM to address quality efforts.  
• Apply and optimize a continuous quality strategy with insights from industry organizations.

A collaborative culture within organizations has been proven to streamline the product development process. It places value on effective communication, integration, and cross-functional teamwork to enable continuous and rapid delivery of reliable products that are also safe and secure.   

Adopting an approach like Agile, which gets applied through methodologies like DevOps, brings teams together for shared ownership, workflow automation, and rapid feedback. All this is then realized through a CI/CD pipeline.   

Join this webinar to see how your embedded software development team can adopt a modern, highly automated workflow to achieve continuous integration, continuous testing, continuous delivery/deployment, and continuous monitoring of software applications throughout the development life cycle. You'll also get the opportunity to see a demo of Parasoft in action in a GitLab CI pipeline. 

Key takeaways: 
• The high value of adopting a modern development workflow 
• Continuous testing: static analysis, unit testing, & code coverage 
• Best practices in applying test automation

Must-Haves in CI/CD Software Development for Embedded

There’s only so much work you can do in each time-constrained sprint. As you advance in your testing practices, you accumulate large numbers of tests that can become difficult and time-consuming to maintain and execute.  

Code changes and automated test runs may happen daily. Rerunning all these tests for each build slows down productivity. With AI-powered test impact analysis (TIA), you can see what code changed and only run those tests associated with the modifications, which speeds up productivity. 

Join this session to find out how visibility and traceability of tests to code coverage provide important insights to mitigate quality risks and drive efficiency. You’ll learn how to: 

• Reduce the scope of re-testing by identifying and executing tests impacted by code changes. 
• Collect and merge code coverage across multiple testing practices. 
• View and analyze correlated test and code coverage data to identify gaps and risks.

Cover Your Apps: Drive Productivity With Test Impact Analysis & Code Coverage

The past 10 to 15 years have been an era of immense change in the automotive industry with EVs, autonomous vehicles, and innumerable safety features—mostly driven by software. In fact, there’s increasing reference to software-defined vehicles. In this software intensive world, it’s no surprise that most automotive orgs are striving to implement CI/CD and DevOps practices. With that comes significant challenges to meet compliance standards for safety and security while driving quality through the supply chain.

Join Matt Klassen and Arthur Hicken to explore the complex and evolving world of automotive DevOps. Starting with the basics, we’ll define the terms and then dig into more advanced topics of automation. We’ll delve into how standards such as MISRA, automotive SPICE®, ISO 26262, AUTOSAR, and ISO 21434 impact modern software dev pipelines. Lastly, we’ll discuss supply chain quality issues and non-safety critical software development.

What You’ll Learn
• How automotive DevOps is relevant to you.
• How compliance can be automated and integrated.
• Best practices in the industry for OEMs and suppliers.

Automotive DevOps: Automating Quality, Safety, & Security

Many enterprise development and testing teams struggle to fully verify their applications due to constraints in their environment. When services, systems, or endpoints are beyond their control or unavailable, testing becomes a bottleneck. As a result, they miss test coverage targets and delivery schedules, resulting in late-cycle defect detection or production outages.  

Augmenting your test environment with simulated services enables teams to develop faster and test earlier and more completely. When evaluating service virtualization solutions, there are many factors to consider for a successful deployment and ROI. In this session, we'll discuss key features and capabilities that have proven successful in virtual deployments. You'll walk away with a checklist to help assess your needs. 

Learn about: 
 - The impact of application testing delays and bottlenecks and how to address them. 
 - The business and technical benefits of environment-based testing. 
 - Key virtualization features to handle the size, scale, and complexity that a modern enterprise requires.

Test Anytime, Anywhere With the Right Service Virtualization Solution

RTCA DO-326A, Airworthiness Security Process Specification, is the industry standard for cybersecurity in aircrafts. The standard gives guidance for assessing security risks during the development process. The airworthiness security process starts with requirements and adherence to those requirements throughout the entire SDLC, and ultimately ensures compliance through verification and validation methods.

Methods like building a requirements traceability matrix help identify any security gaps and vulnerabilities in design, architecture, and implementation. Testing technologies like static analysis, unit testing, code coverage, and code reviews, ensure that security requirements are being satisfied and contribute to the evaluation of security effectiveness and risk.  

Learn how to: 
• Apply safety requirements management methods for security. 
• Shift left security testing (SAST, DAST). 
• Integrate DevSecOps into your development workflow

How to Validate DO-326A Airworthiness Security Requirements

Many customer services have shifted to digital channels such as contact centers. Expanding teams in hybrid locations has its own set of challenges, including initial and ongoing training. Getting new employees up to speed quickly, no matter where they're located, is key to high employee retention and, ultimately, customer satisfaction.  

Training employees, partners, and customers on corporate systems can be done more quickly with a dedicated environment. However, creating such an environment involves duplicating an intricate web of internal infrastructures, which can be costly and complicated. Additionally, companies must protect sensitive business data from inadvertent changes made by inexperienced users. 

You can set up a safe “sandbox” for designated team members to use for application learning with a virtual training environment that provides just what you need: reliable access with minimal risk and cost. Create a simulated version of your actual environment that behaves like the real thing, so your team can learn the functions they need for their jobs, using synthetic data that can be reset and reused on demand. 

Learn how adopting a virtual training environment will help you: 
• Simplify the creation and availability of a virtual training center. 
• Dramatically reduce the fixed costs and risks of onboarding team members. 
• Easily manage and scale the training environment dynamically. 
• Provide new hires with a first-class onboarding experience.

Empower Your Hybrid Workforce With Virtual Training Environments

Delivering software fast is good but delivering fast with confidence is better. Leading development groups have figured out five imperatives for improving confidence in software quality, security, safety, and compliance while maintaining CI/CD velocity.  

One of the big keys is having a continuous quality approach that integrates into your existing CI/CD pipeline and toolchain. Forrester recommends using tools from as few tool vendors as possible to minimize integration work. In addition, a well-defined development workflow will incorporate key elements such as test automation, security testing, early defect identification, and more.  

You also need insights into your testing processes and results to measure your level of confidence and mitigate any potential risks for the release. A mature development process collects the relevant data that shows how your application is performing against your key metrics. 

To increase confidence in your software, attend this discussion to learn about: 
• 5 imperatives for instilling confidence in your development pipeline. 
• Real company examples for addressing software delivery challenges.  
• Techniques and practices to deliver software with confidence.

5 Imperatives for Delivering Software With Confidence

Specific testing methods depend on the Automotive Safety Integrity Level (ASIL) classification of the system. To address safety and security from the get-go, MISRA C 2012, AUTOSAR C++14, CERT, or a custom hybrid are known to be used in achieving code quality across suppliers and primes.

The cost of achieving ISO 26262 compliance in software testing can be expensive. In this presentation, learn how to reduce costs through automating the multiple testing methods required by the standard to produce safe, secure, and reliable software.

Key takeaways:
 * Apply static analysis for software safety and security.
 * Expedite your unit testing with test automation.
 * Understand the various structural code coverage options.
 * Identify requirement traceability gaps in testing.

ISO 26262 Compliance in Testing Automotive Software

2022 could be the year of the E truck. As it begins, the automotive market is introducing more electric vehicles (EVs). Chevy revealed its electric Silverado to rival Ford’s F-150 Lightning. It’s a fight for dominance, but where are we with the charging infrastructure, advances in driving range, and ADAS innovations?  

These evolutionary strides lead to a lot more software with the potential for more complex problems. Consider the high risks in the supply chain from software of unknown pedigree from various suppliers. In leu of unthought security and safety risks, automotive standards organizations have enhanced their compliance requirements in all phases of the SDLC.  

In addition, to ensure the implementation of new security measures, some countries have joined forces and introduced new regulatory requirements—satisfy them or you can’t sell there. 

Key Takeaways 
• The importance of EVs in the industry. 
• How ADAS is impacting the world experience. 
• How to change and adapt to expanded automotive standards. 
• New government regulatory compliance directives. 
• Augmenting your V-model process for security and safety. 
• Test verification and validation for security and safety.

Is This the Year of EVs?

The effort and cost of achieving DO-178B/C compliance and certification of software can be confusing and expensive. You can reduce the struggle and expense by automating the multiple testing methods required by the standard. In this webinar, discover how to produce safe, secure, reliable, and certifiable software in compliance with DO-178B/C.

Key takeaways:
• Apply static analysis for both software safety and security.
•	Expedite your unit testing with test automation.
•	Understand the various structural code coverage options.
•	Identify requirement traceability gaps in testing

Tackling Safety & Security for Avionics Software

DO-178B/C

Compliance

Compliance Testing

Testing

Test Automation

Security

static analysis

Unit Testing

Risk Management

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The application development community features top thought leadership focusing on optimal practices in software development, SDLC methodology, mobile app development and application development platforms and tools. Join top software engineers and coders as they cover emerging trends in everything from enterprise app development to developing for mobile platforms such as Android and iOS.

Application Development

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Get powerful insights to run your business. CEOs, CFOs, CMOs, COOs, CTOs and CIOs are among the leaders in this community who connect with peers and experts to grow their businesses.

CxO Strategy

In the business management community, commercial experts will be sharing webinars and videos on an array of subjects. From sales and marketing, to finance, productivity and growth, this content will help you stay up-to-date with the current economic environment and provide timely management insight to drive business growth.

Tackling Safety & Security for Avionics Software

Presented by

About this talk

More from this channel