BETA - Securing microservices

•

9 likes•1,602 views

Sam Newman

This is an early version of my talk on microservices and application security.

Software

SECURING
MICROSERVICES
Berlin Microservices Meetup
October 2015

@samnewman
Sam Newman
Building
Microservices
DESIGNING FINE-GRAINED SYSTEMS

@samnewmanhttps://www.ﬂickr.com/photos/seattlemunicipalarchives/4058808950

@samnewmanhttps://www.ﬂickr.com/photos/theseanster93/485390997/

@samnewman
S/M TestsBuild Large Tests Production
Security? Security?

@samnewmanhttps://www.microsoft.com/en-us/sdl/

@samnewman
Prevention Detection
Response

@samnewman
Prevention Detection
ResponseRecovery

@samnewmanhttps://www.ﬂickr.com/photos/adulau/15680439035/

@samnewmanhttps://www.ﬂickr.com/photos/duanestorey/469163789/

@samnewman
https://www.schneier.com/paper-attacktrees-ddj-ft.html

@samnewman
Open Safe
Pick Lock Learn Combo Cut Open

@samnewman
Open Safe
Pick Lock Learn Combo Cut Open
Find Written
Combo
Get Combo from
the target

@samnewman
Open Safe
Pick Lock Learn Combo Cut Open
Find Written
Combo
Get Combo from
the target
Blackmail Threaten Bribe

@samnewman
Open Safe
Pick Lock Learn Combo Cut Open
Find Written
Combo
Get Combo from
the target
Blackmail Threaten Bribe
Impossible
Impossible Impossible
Possible
Possible
Possible

@samnewman
Catalog
service
Music
Web Shop
Recommend
service
Royalty
service
Mobile
app
Web
browsers
User
service

@samnewman
Catalog
service
Music
Web Shop
Recommend
service
Royalty
service
Mobile
app
Web
browsers
User
service
Transport Security

BENEFITS OF HTTPS?
▫︎Server guarantees!
18

BENEFITS OF HTTPS?
▫︎Server guarantees!
▫︎Payload not manipulated…
18

BENEFITS OF HTTPS?
▫︎Server guarantees!
▫︎Payload not manipulated…
▫︎…but no client guarantee and…
18

BENEFITS OF HTTPS?
▫︎Server guarantees!
▫︎Payload not manipulated…
▫︎…but no client guarantee and…
▫︎…certiﬁcates can be a pain
18

Catalog
service
Music
Web Shop
Recommend
service
Royalty
service
Mobile
app
Web
browsers
User
service

CLIENT-SIDE CERTIFICATES?
▫︎Client guarantees!
22

CLIENT-SIDE CERTIFICATES?
▫︎Client guarantees!
▫︎…but a PITA to manage….
22

@samnewman
http://techblog.netﬂix.com/2015/09/introducing-lemur.html

@samnewman
Catalog
service
Music
Web Shop
Recommend
service
Royalty
service
Mobile
app
Web
browsers
User
service
Web
browsers
Form AuthOAuth

@samnewman
Catalog
service
Music
Web Shop
Recommend
service
Royalty
service
Mobile
app
Web
browsers
User
service
User
service

@samnewman
http://www.banyanops.com/blog/analyzing-docker-hub/

@samnewman33
Prevention Detection
ResponseRecovery

@samnewman
https://www.qualys.com/research/top10/

@samnewman
Polyglot = more stuff to track!

@samnewman37
Catalog
service
Music
Web Shop
Recommend
service
Royalty
service
Mobile
app
Web
browsers
User
service

@samnewman37
Catalog
service
Music
Web Shop
Recommend
service
Royalty
service
Mobile
app
Web
browsers
User
service
PERIMITER SECURITY!

@samnewman
CC Attribution 2.0 Generic https://www.ﬂickr.com/photos/ﬂissphil/52158537/

@samnewman
http://www.extremetech.com/computing/190959-shellshock-a-deadly-new-vulnerability-that-could-lay-waste-to-the-internet

@samnewman42
Prevention Detection
ResponseRecovery

@samnewmanhttp://krebsonsecurity.com/tag/target-data-breach/

@samnewman4949
Prevention Detection
ResponseRecovery

@samnewman535353
Prevention Detection
ResponseRecovery

@samnewman
snewman@thoughtworks.com
THANKS!

What's hot

The challenges of managing many, smaller deployable services mean that what we need in terms of deployment platforms are very different to what was needed before. But few areas of software technology have been experiencing as much innovation and churn as the deployment options available for microservice architectures. From appication containers, to docker, to mesos and beyond, this talk will break apart the myriad challenges that can come from managing microservices at scale, and how to pick the right technologies for you.

Deploying and Scaling Microservices

Sam Newman

Presented at NDC London, December 2014 Microservice architectures can lead to easier to change, more maintainable systems which can be more secure, performant and stable than previous designs. But what are the practical concerns associated with running more fine-grained systems, and what are the new things you’ll need to know if you want to embrace the power of smaller services without the new sources of complexity making your life a nightmare? This talk will delve deeper into the characteristics of well-behaved services, and will define some clear principles your services should follow. It will also discuss in more depth some of the challenges associated with managing and monitoring more complex distributed systems. We’ll discuss how you can design services to be more fault-tolerant, what technologies may exist in your own platform to get you started. We’ll end by giving some pointers as to when you should consider microservice architectures, and how you should go about introducing them in your own organisation.

Practical microservices - NDC 2014

Sam Newman

Principles of Microservices - NDC 2014

Sam Newman

Microservices give us many options. We can pick different technologies, mix synchronous and asynchronous integration techniques or embrace different deployment patterns. But they also give us different options for how we think about securing our systems. Done right, and microservices can increase the security of your vital data and processes. Done wrong, and you can increase the surface area of attack. This talk will discuss the importance of defence in depth, discussing the many different ways in which you can secure your fine-grained, distributed architectures. The audience should come away with a working framework for thinking about application security, and also understand how microservices can help (or hinder) building a secure system.

AppSec and Microservices

Sam Newman

The growth of the public cloud market is obvious to everyone. But what’s less well known is that enterprises are still growing the infrastructure and services they run for themselves. A common reason cited for the continual growth in private cloud rather than adopting public cloud offerings are concerns about being locked in to a specific vendor. This talk analyses the concerns about vendor lock-in with respect to the adoption of public cloud. Sam will share with you not only whether or not the concerns of lock-in have merit in the real world, but will also present some tools you can use to help your own thinking in this regard.

It's a trap!

Sam Newman

Testing & deploying microservices - XP Days Ukraine 2014

Sam Newman

Hiding The Lead: Coupling, cohesion and microservices

Sam Newman

Serverless computing is the hot new thing. Like any hyped technology, it promises a lot. However questions remain around concept and implementation, especially when you start to compare how we've built systems in the past, and what serverless offers us now. Is Serverless the future, or just the emperor's new clothes? This talk will very briefly introduce serverless computing, but will then dive into some of the questions that aren't always asked in conjunction with this technology. Topics will include: How does your attitude to security change? Is it easier, or harder, to create reliable, resilient systems? Do patterns like Circuit breakers and connection pools make sense any more? Is vendor lock-in a problem? Is serverless computing only for microservice architectures? Which problems fit serverless computing? By the end of the talk you should have a firm grasp of what serverless computing really can offer, cut through some of the hype, and get an understanding about where and how you can use it in your own organisations.

Confusion In The Land Of The Serverless

Sam Newman

This talk is distillation of what makes microservices different from normal services. While this talk can serve as an introduction to microservices the real goal is to help tease out the key areas of what is a very broard topic. There has been lots of buzz around Microservices over the last year, but there has often been a lack of clarity as to what Microservices are, or how to implement them well. I've been working to distill down the principles of Microservices to help ensure that we don't just end up repeating the mistakes we made during the last 20 years of service oriented architecture. I'll talk about the history of where Microservices came from, what they are, the benefits and downsides, and the core principles to stick to do to them well. This is a shorter 60min version of the presentation

Principles of microservices ndc oslo

Sam Newman

From macro to micro goto

Sam Newman

Much of the attention for microservice architectures tends to focus on the technical aspects. But when you look into the details of organisations that have benefited from this approach you realise that there is more to getting the most out of microservices than lots of shinny new technology. In this talk, I show how organisational structures and team responsibilities may need to change if you want to get the most out of adopting a microservice architecture. Looking at traditional IT structures and comparing them with the modern autonomous delivery teams, he’ll explore how to get the organisation and architecture working well together. From Conway's law, to Dunbar's number and two pizza teams, you'll see how you can start to apply these ideas inside your own company.

Rip It Up - The Microservice Organisation

Sam Newman

THE UX OF DATA - VISUALIZATION RESPONSIVE

Peter Rozek

Deploying and Testing Microservices

Thoughtworks

Networks, Networks Everywhere, And Not A Packet To Drink

ReadWrite

Building better content creation with wysiwyg fields and custom formatters

Stuart Clark

The UX of DATA: Responsive Datenvisualisierung mit jQuery

Peter Rozek

Cool Storytelling Tools

Evelyn McCormack

Performance and UX

Peter Rozek

Taking the P out of PWA

Christian Heilmann

Rhys Wynne

Rachel Bell

What's hot (20)

Deploying and Scaling Microservices

Practical microservices - NDC 2014

Principles of Microservices - NDC 2014

AppSec and Microservices

It's a trap!

Testing & deploying microservices - XP Days Ukraine 2014

Hiding The Lead: Coupling, cohesion and microservices

Confusion In The Land Of The Serverless

Principles of microservices ndc oslo

From macro to micro goto

Rip It Up - The Microservice Organisation

THE UX OF DATA - VISUALIZATION RESPONSIVE

Deploying and Testing Microservices

Networks, Networks Everywhere, And Not A Packet To Drink

Building better content creation with wysiwyg fields and custom formatters

The UX of DATA: Responsive Datenvisualisierung mit jQuery

Cool Storytelling Tools

Performance and UX

Taking the P out of PWA

Rhys Wynne

Similar to BETA - Securing microservices

Delivering small and fast means we are more frequently introducing new vulnerabilities. We're facing new threats that come from cloud computing and the internet of things.Traditional cycles of pentests and code reviews are not keeping up. DevSecOps focuses on integrating security in our processes and teams. Automate first and fail fast will help build security in, and will also support the growth of awareness in the teams. Kim will show the practical lessons learned from her journey. Get an overview of the current continuous security landscape and the practical insights and pitfalls.

Kim van Wilgen - Continuous security - Codemotion Rome 2019

Codemotion

Agile is maturing in delivering incremental change. We innovate through data-driven experiments, enabled through continuous delivery and evolutionary architectures. Delivering small and fast means we are more frequently introducing new vulnerabilities. We are also facing new threats that come from increased integration through cloud computing and the internet of things. Traditional cycles of penetration tests and code reviews are not keeping up with the accelerated delivery pace unless these processes are also automated. DevSecOps focusses on integrating security in our processes and teams. Automate security first and fail fast will help build security in, but will also support the growth of awareness in the teams. Kim will show the lessons learned from her journey to Continuous security at ANVA, securing their open SaaS cloud platform for insurance software. Get an overview of the current continuous security landscape and the practical insights and pitfalls. And learn how security can be fun.

Continuous security

Kim van Wilgen

Kim van Wilgen - Continuous security - Codemotion Amsterdam 2019

Codemotion

Comme l’une des conséquences de la consumérisation de l’IT, les utilisateurs s’attendent aujourd’hui à accéder à toutes les ressources de l’entreprise tout le temps et en toute transparence : depuis n’importe quel emplacement (bureau, domicile, en mobilité) et depuis n’importe quel appareil (ordinateur portable, tablette, téléphone intelligent, etc.). La réponse à cette attente courante suppose de rendre accessibles depuis l’Internet les ressources à demeure de l’entreprise tout en veillant à ce que les risques associés soient sous contrôle de manière efficace. Pour répondre à ce défi, Microsoft présente deux solutions d'accès conditionnel : Azure Active Directory Application Proxy et Windows Server Web Application Proxy (WAP). Ces deux solutions permettent aux administrateurs d’offrir un accès sécurisé aux applications et APIs web internes à des appareils en dehors des limites du réseau de l'entreprise, appareils qui ne sont parfois pas gérés par l’IT, voire n’appartiennent pas à l’entreprise (BYOD), et ne font bien sûr pas partie d’un domaine Active Directory. Cette session illustre comment Azure Active Directory Application Proxy propose une solution complète avec les autres fonctionnalités d’Active Directory Azure avec, à la clé, une empreinte minimale en termes de déploiement. L’alternative WAP local est également illustrée. Cette session vous permet de comprendre comment ces solutions peuvent répondre à vos préoccupations d’assurer la productivité de vos utilisateurs de n'importe où d'une manière simple et sécurisée.

Web/Azure Application Proxy : des apps, de la sécurité, partout !

Microsoft Technet France

Web/Azure Application Proxy : des apps, de la sécurité, partout !

Microsoft Décideurs IT

What do deployment pipelines look like when your system consists of 10s of different types of services? How do you know what to test before deployment? Should you release a service at a time, or bunch them up? This talk goes into the nitty gritty of managing build,test and release of micro services and also covers the often ignored tradeoff between testing before deployment, and testing afterwards. Presented at GeeCon 2014

Testing & deploying Microservices GeeCon 2014

Sam Newman

ALM for Developing Engineered Systems - Michael Azoff (Ovum) - 14 May 2019

Intland Software GmbH

Continuous Security: Zap security bugs now Codemotion-2015

Carlo Bonamico

The "Security Sandwich" approach (up-front design + end-of-project Vulnerability Assessment) ineffectively exposes most vulnerabilities just before Production, when there is no more time/budget for massive refactoring or changes. Recently, Continuous Integration & Delivery achieved their huge positive impact by spreading Testing and Quality through the entire sw lifecycle. We share our experience in applying this approach to Security, & demonstrate how Open Source tools such as OWASP ZAP, while not covering all risks, effectively help us to continuously caring and testing for Security issues.

Carlo Bonamico, Gabriele Guasco - Continuous Security: ZAP your security issu...

Codemotion

PDF TEST

B2BContact

KLEMEN on INNOVATION Webster 20150611 FINAL

Michael Klemen

The mainframe remains more resistant to a malicious breach than any other part of the infrastructure. However, like medieval castles, their walls are no longer impregnable. Just as siege engines brought down walls and traitors opened gates, the mainframe experiences risks from both technical exploits and social engineering. Learn more about how applying risk-based security to z/OS helps you anticipate attacks and compromises before they occur, so you can enhance your walls of protection to your mission-critical data. For more information, please visit http://cainc.to/Nv2VOe

Castle Walls Under Digital Siege: Risk-based Security for z/OS

CA Technologies

Testing in the 21st Century

Alex Soto

New Mainframe IT Analytics: Actionable Insight into Root Cause Analysis of Pe...

CA Technologies

Attack Vectors in Biometric Recognition Systems

Clare Nelson, CISSP, CIPP-E

2015 positioning security & networking

Ariel Evans

A slow time to market and the associated cost of delay is crippling many organisations as their strategic platforms can no longer support innovation to stay ahead. Often these platforms are built in silos, which are hard to integrate with or change. Companies like Amazon, Netflix, RBS and eBay have shown that it needn't be this way. This revolution is being driven in large part by their adoption of microservice architectures, they are building systems composed of small collaborating services that can be changed, scaled or even replaced independently - but employing Microservices is not without challenges.

Deploying & operating microservices

Thoughtworks

PPT TEST

B2BContact

NOS Webinar: Reduce Security Risks to Protect Your Network Final

B2BContact

From mobile device policy to bring your own device (BYOD)

Jisc

Similar to BETA - Securing microservices (20)

Kim van Wilgen - Continuous security - Codemotion Rome 2019

Continuous security

Kim van Wilgen - Continuous security - Codemotion Amsterdam 2019

Web/Azure Application Proxy : des apps, de la sécurité, partout !

Testing & deploying Microservices GeeCon 2014

ALM for Developing Engineered Systems - Michael Azoff (Ovum) - 14 May 2019

Continuous Security: Zap security bugs now Codemotion-2015

Carlo Bonamico, Gabriele Guasco - Continuous Security: ZAP your security issu...

PDF TEST

KLEMEN on INNOVATION Webster 20150611 FINAL

Castle Walls Under Digital Siege: Risk-based Security for z/OS

Testing in the 21st Century

New Mainframe IT Analytics: Actionable Insight into Root Cause Analysis of Pe...

Attack Vectors in Biometric Recognition Systems

2015 positioning security & networking

Deploying & operating microservices

PPT TEST

NOS Webinar: Reduce Security Risks to Protect Your Network Final

From mobile device policy to bring your own device (BYOD)

Recently uploaded

%in Midrand+277-882-255-28 abortion pills for sale in midrand

masabamasaba

Pharm-D Biostatistics and Research methodology

Anusha Are

%in tembisa+277-882-255-28 abortion pills for sale in tembisa

masabamasaba

LEVEL 5 - SESSION 1 2023 (1).pptx - PDF 123456

KiaraTiradoMicha

At TECUNIQUE, we're a stable and steadily growing Indian software services company with over 14 years of industry experience. Specializing in offshore software development and quality assurance services, we've built a reputation for delivering unique and effective solutions to start-ups, software development companies, enterprises, and digital agencies. We pride ourselves on our commitment to excellence and innovation. By blending insightful business domain knowledge with exceptional technical prowess, we craft tailor-made solutions that meet the unique needs of our clients. Our dedicated teams are adept in specific technologies, ensuring seamless integration of skills and delivering reliable, scalable, and high-quality software solutions aligned with our clients' preferences. Bespoke Dedicated Teams: Crafted to meet your specific needs and technology preferences, our dedicated teams are committed to delivering top-notch software solutions. Offshore Software Development: Accelerate your software development and scale up quickly with our 12+ years of expertise in offshore development. Quality Assurance Services: Ensure the quality of your software products with our dedicated teams of experienced QA professionals. IT Staff Augmentation: Overcome skill gaps with our client-centric software team, offering staff augmentation services. Expert Software Services: Unlock our capabilities in custom software development, product development, and quality assurance. Mission and Vision: Our mission at TECUNIQUE is to be the catalyst for our clients' success in the dynamic domain of software development. Rooted in our core values of respect, authenticity, and responsibility, we strive to ease the software outsourcing experience, reducing both time and cost to market for our clients. We envision ourselves as the leading Indian software services company, renowned for our unwavering commitment to excellence and innovation. www.tecunique.com

TECUNIQUE: Success Stories: IT Service provider

mohitmore19

%in kaalfontein+277-882-255-28 abortion pills for sale in kaalfontein

masabamasaba

ManageIQ - Sprint 236 Review - Slide Deck

ManageIQ

OpenChain - The Ramifications of ISO/IEC 5230 and ISO/IEC 18974 for Legal Pro...

Shane Coughlan

Direct Style Effect Systems -The Print[A] Example- A Comprehension Aid

Philip Schwarz

Technology has taken up space all over the world. From generating content with a single command on ChatGPT to getting your food served by Robots at your favorite restaurant, artificial advancements have ruled every space. Every industry is set to develop top-notch technology in every sector; finance, IT, healthcare, gaming, and banking, with competitive market standards. One of these rapidly growing industries is Mobile App Development. According to the Straits Research report, it is expected to reach USD 583.03 billion at a CAGR OF 12.8% between (2022 and 2030). It clearly shows how mobile app development has become an integral part of the digital landscape and revolutionized technology.

The Top App Development Trends Shaping the Industry in 2024-25 .pdf

ayushiqss

%in ivory park+277-882-255-28 abortion pills for sale in ivory park

masabamasaba

In the past six months, the AI landscape has undergone a massive transformation, ushering in a new era of productivity with the latest in Large Language Models (LLMs) and AI technology. This deep dive unlocks how to: Create CustomGPT Models: No coding needed to tailor AI for your unique projects. Integrate your own data, including PDFs and Excel sheets, making information handling a breeze. Plus, discover how to call your own actions/integrations for even more personalized utility. Navigate Advanced Prompting: Overcome AI's memory limits and utilize Retrieval-Augmented Generation for accessing your personalized data, streamlining how you interact with AI. Stay Ahead with AI Trends: Peek into the evolving world of LLMs, featuring newcomers like Google Gemini, Anthropic Claude, Open Sora, and Twitter Grok, and understand what their advancements mean for your productivity. Witness Real-Life Transformations: Through examples and prompt demonstrations, see firsthand how these AI strategies revolutionize routine tasks, from data analysis to content creation. Learn to leverage image output and input for advanced practical use cases, adding a new dimension to your productivity toolkit. No previous coding or AI experience is needed for this talk. Stay ahead in the fast-evolving world of work. Embrace the AI revolution and transform your workflow with advanced LLM techniques. Join us to ensure you're not left behind in the productivity race.

AI Mastery 201: Elevating Your Workflow with Advanced LLM Techniques

VictorSzoltysek

A Secure and Reliable Document Management System is Essential.docx

ComplianceQuest1

MarTech Trend 2024 Book : Marketing Technology Trends (2024 Edition) How Data...

Jittipong Loespradit

The title is not connected to what is inside

shinachiaurasa2

Azure Native Qumulo scales elastically for common High Performance Compute (HPC) workloads based on application requirements for: Financial Services, Automotive, Genomics / Life Sciences, Media and Entertainment, Energy, Oil and Gas, etc. Performance can be dialed UP (and back down) much higher than the examples shown here. These slides offer a glimpse into ANQ's HPC capabilities, although at a smaller scale. We invite YOU to do your own testing (with a free ANQ trial) and work with us to test your HPC workloads in Azure.

Azure_Native_Qumulo_High_Performance_Compute_Benchmarks.pdf

ryanfarris8

Conference: Engage2024 in Antwerp Type: Workshop Speakers: Florian Vogler, Henning Kunz, Christoph Adler Title: Navigating the Future with The Hitchhiker's Guide to Notes and Domino 14 Abstract: Embark on an exhilarating journey with industry trailblazers Florian Vogler, Henning Kunz, and Christoph Adler in this not-to-be-missed workshop at the forefront of the tech universe. Get ready for a thrilling kick-off as we navigate the current state of the HCL universe, setting the stage for an exploration of the groundbreaking Notes and Domino 14. Discover the latest enhancements and revolutionary features that will redefine your experience. In this interactive session, unlock a treasure trove of tips and tricks to elevate your utilization of version 14, both with and without the game-changing panagenda MarvelClient. Brace yourself for also diving into Nomad, Nomad Web, and VoltMX, expanding your horizons in the expansive HCL landscape. Be a part of this exclusive opportunity to stay ahead in the ever-evolving world of HCL technologies. Your journey to mastering Notes and Domino 14 begins here. And remember, in the spirit of intergalactic exploration, don't forget to bring your towel!

W01_panagenda_Navigating-the-Future-with-The-Hitchhikers-Guide-to-Notes-and-D...

panagenda

Learn the Fundamentals of XCUITest Framework_ A Beginner's Guide.pdf

kalichargn70th171

At the recent Microsoft Ignite 2023 conference, Microsoft unveiled a groundbreaking strategy that will redefine enterprise work management. The plan involves integrating Microsoft’s key planning tools, Microsoft To Do, Microsoft Planner, and Microsoft Project for the web into a unified experience called “Microsoft Planner.” What does this new strategy from Microsoft mean for current users? Join us and learn how best to take advantage of this announcement while gaining a clear path on how to elevate the current state of Microsoft Planner from a basic task manager to a comprehensive tool for Enterprise Work Management using OnePlan. Learn how OnePlan’s integration with Microsoft Planner allows for strategic alignment with business goals through advanced features like strategic planning, portfolio management, resource management, financial management, and more!

Introducing Microsoft’s new Enterprise Work Management (EWM) Solution

OnePlan Solutions

Software Quality Assurance Interview Questions

Arshad QA

Recently uploaded (20)

%in Midrand+277-882-255-28 abortion pills for sale in midrand

Pharm-D Biostatistics and Research methodology

%in tembisa+277-882-255-28 abortion pills for sale in tembisa

LEVEL 5 - SESSION 1 2023 (1).pptx - PDF 123456

TECUNIQUE: Success Stories: IT Service provider

%in kaalfontein+277-882-255-28 abortion pills for sale in kaalfontein

ManageIQ - Sprint 236 Review - Slide Deck

OpenChain - The Ramifications of ISO/IEC 5230 and ISO/IEC 18974 for Legal Pro...

Direct Style Effect Systems -The Print[A] Example- A Comprehension Aid

The Top App Development Trends Shaping the Industry in 2024-25 .pdf

%in ivory park+277-882-255-28 abortion pills for sale in ivory park

AI Mastery 201: Elevating Your Workflow with Advanced LLM Techniques

A Secure and Reliable Document Management System is Essential.docx

MarTech Trend 2024 Book : Marketing Technology Trends (2024 Edition) How Data...

The title is not connected to what is inside

Azure_Native_Qumulo_High_Performance_Compute_Benchmarks.pdf

W01_panagenda_Navigating-the-Future-with-The-Hitchhikers-Guide-to-Notes-and-D...

Learn the Fundamentals of XCUITest Framework_ A Beginner's Guide.pdf

Introducing Microsoft’s new Enterprise Work Management (EWM) Solution

Software Quality Assurance Interview Questions