Most of us are not familiar with the term “Software Testing“. We always think developers are the only people responsible for successful software. How many of us know that the software developed by developers is of little worth unless it is tested and proved error free? This very essential phase is called “Testing”, which involves “Verification” and “Validation” of the product.

The first barrier to a successful career in software testing is our attitude towards this field: we feel it is inferior. “What is testing, but playing with software?” is what even most developers think. Truth be told, there is nothing so inferior about testing to developing.

The testing team is technically called Q.A. ie; Quality Assurance. As the name says it all, it is these people who deliver the product, quality assured. Why this field is challenging than developing is because you will have to spot the area developers overlooked. As a matter of hard fact, developing primarily focuses on the brighter side of the project. They don’t deviate from their regular path of glory which they relive for years together, which is why developers don’t make good testers.

The very essential characteristics of a good tester would be:

–> understand customer perspective

–> Out of the box thinking

–> Domain knowledge

–> Basic manual testing strategies

Two basic testing methodologies are:

1) Manual Testing
2) Automated testing

Manual testing suggests testing without any tools involved. It is entirely manual, as the name says. Unlike in manual testing, some of the major tools used in automated testing are listed below.

1) QTP (Quick Test Professional)
2) Load Runner
3) Win Runner
4) QC

LIFE CYCLE OF SOFTWARE TESTING:

* Requirement gathering: Includes collecting requirements, functional specifications, and other necessary           documents.

* Obtain end dates for completion of testing.

* Identify resources and their responsibilities, required standards and processes.

* Identify application’s high risk area, prioritize testing, and determine scope and assumptions of testing

* Determine test strategy and types of testing to be used – Smoke, System, Performance etc

* Determine hardware and software requirements

* Determine test data requirements

* Divide the testing into various tasks

* Schedule testing process

* Create test cases: A test case is a document that describes an input, action, or event and an expected response, to determine if a feature of an application is working correctly.

* Review the test cases

* Finalize test environment and test data. Make sure the test environment is separated from development environment.

* Get and install software deliveries (basically the developed application)

* Perform tests using the test cases available

* Analyze and inform results

* The defect needs to be informed and assigned to programmers who can fix those.

* Track reported defects till closure

* Perform another cycle/s if needed : After the defects is fixed, the program needs to be re-tested, for the fix done and also to confirm that defect fixing has not injected some other defect.

* Update test cases, test environment, and test data through life cycle as per the change in requirements, if any.

What should a fresher do if he is impressed by testing?

1) Gain wide-spread knowledge on testing methodologies
2) Study blogs and websites which provide plenty of information for free.
3) Possibly get certified by an institute.

What are the recommended certifications?

1) Certified Associate in Software Testing (CAST)
2) Certified Associate in Software Quality (CASQ)

As the IT industry becomes more competitive, the ability for management to distinguish professional and skilled individuals in the field becomes mandatory. CAST Certification demonstrates a foundation-level understanding of quality testing principles and practices.

Acquiring the designation of CAST and CASQ indicate a professional level of competence in the principles and practices of software testing in the IT profession. Certified candidates become members of an acclaimed professional group, receiving recognition of their competence by business and professional associates, and are potentially prone to a more rapid career advancement.

Prerequisites checklist for CAST and CASQ:

To qualify for candidacy, each applicant must meet one of three prerequisites:

1. A 3-year degree or 4-year degree from an accredited college-level institution
2. A 2 year degree from an accredited college-level institution and 1 years experience in the information services field
3. Three years experience in the information services field

3) Certified Software Quality Analyst (CSQA)

Prerequisites:

To qualify for candidacy, each applicant must meet one of four prerequisites:

1. A 4 year degree from an accredited college-level institution and 2 years experience in the information services field
2. A 3 year degree from an accredited college-level institution and 3 years experience in the information services field
3. A 2 year degree from an accredited college-level institution and 4 years experience in the information services field
4. Six years experience in the information services field

4) Certified Software Tester (CSTE)

To qualify for candidacy, each applicant must meet one of four prerequisites:

1. A 4 year degree from an accredited college-level institution and 2 years experience in the information services field
2. A 3 year degree from an accredited college-level institution and 3 years experience in the information services field
3. A 2 year degree from an accredited college-level institution and 4 years experience in the information services field
4. Six years experience in the information services field

and Currently working, or having worked at any time within the past 18 months in the field covered by the certification.

Author
C.Vignesh

Vignesh is a Testing Engineer working in a reputed company at Chennai. He has years of experience in Software testing and development.

Why so much hype?  Security professional?

Computer security is one of the most fascinating & interesting technology fields currently in existence. Now that computers are used in every area in our life and will presumably become a necessity in almost all things, formidable protection of private data requires educated experts. Information Security Professionals and related career specialties are considered one of the fastest growing and highest paid technology occupations according to a number of sources.

The salary ranges herein are the United States national averages for May 2008 courtesy of Salary.com. These figures are climbing rapidly as the demand for Infosec professionals rise. Also note that the sector of industry has a major impact on IT salaries.

Below is some of the certification that you have to look out for if you would like to pursue your career in this field.

• CISSP
• CISM
• CISA
• Other Certifications

CISSP^® – Certified Information Systems Security Professional – The Certification That Inspires Utmost Confidence

If you plan to build a career in information security – one of today’s most visible professions – and if you have at least five full years of experience in information security, then the CISSP^® credential should be your next career goal.The CISSP was the first credential in the field of information security, accredited by the ANSI (American National Standards Institute) to ISO (International Standards Organization) Standard 17024:2003. CISSP certification is not only an objective measure of excellence, but a globally recognized standard of achievement.

For your CISSP credential, your professional experience has to be in two or more of these 10 (ISC)² CISSP domains:

• Access Control
• Application Development Security
• Business Continuity and Disaster Recovery Planning
• Cryptography
• Information Security Governance and Risk Management
• Legal, Regulations, Investigations and Compliance
• Operations Security
• Physical (Environmental) Security
• Security Architecture and Design
• Telecommunications and Network Security

Whatever you want to know about CISSP – Follow this link – http://www.cccure.org/flash/intro/player.html

What the papers say?

“The CISSP certification long ago made the gold standard, but infosec execs are now wisely adding the new CISM certification. Why the push? The advanced-level CISM better addresses the interdependency between business needs and IT security by focusing on risk management and security organizational issues.”
– David Foote, Foote Partners, LLC, SC Magazine, July 2005

CISM:

Source: www.isaca.org

Certified Information Security Manager (CISM) is a certification for information security managers awarded by the Information Systems Audit and Control Association (ISACA). To gain the certifications, individuals must pass a written examination and have at least five years of information security experience with a minimum three years of information security management work experience in particular fields.

The intent of the certification is to provide a common body of knowledge for information security management. The CISM focuses on information risk management as the basis of information security. It also includes material on broader issues such as how to govern information security as well as on practical issues such as developing and managing an information security program and managing incidents.

The point of view in the certification is that of widely accepted cross-industry best practices, where information security gets its justification from business needs. The implementation includes information security as an autonomous function inside wider corporate governance.

The CISM certification tends to be sought after by both CISA and CISSP certification communities. ISACA created the CISM to help foster a better fusion between IT auditing and information security perspectives.

In principle, the CISM certification is related in nature to the Information Systems Security Management Professional certification from the International Information Systems Security Certification Consortium.

Links to explore:

• http://www.isc2.org/cissp/default.aspx
• http://www.isaca.org/template.cfm?section=home
• http://www.isaca.org/Template.cfm?Section=CISM_Certification&Template=/TaggedPage/TaggedPageDisplay.cfm&TPLID=16&ContentID=7513

CISA:

The CISA designation is awarded to those individuals with an interest in Information Systems auditing, control, and security who have met and continue to meet the following requirements regarding:

• Successful completion of the CISA examination
• Information systems auditing, control or security experience
• Adherence to the Code of Professional Ethics
• Adherence to the continuing professional education program
• Compliance with the Information Systems Auditing Standards

Prologue by the providers –

“The mark of excellence for a professional certification program is the value and recognition it bestows on the individual who achieves it. Since 1978, the Certified Information Systems Auditor (CISA) program, sponsored by ISACA® has been the globally accepted standard of achievement among information systems (IS) audit, control and security professionals.”

External Link:
http://www.isaca.org/Template.cfm?Section=CISA_Certification&Template=/TaggedPage/TaggedPageDisplay.cfm&TPLID=16&ContentID=4526

How to become a CISA

ISACA has stipulated the following guidelines for getting the CISA designation. Remember, passing the examination is just the first step.

1. Successful completion of the CISA examination.

The CISA exam is offered annually during the months of June and December.. So the next examination is scheduled for 12 December 2009.The examination consists of 200 multiple choice questions to be answered within four hours. The passing score is 75 percent, which means that if you pass the exam, you have scored marks, which put you in the top 25%.

2. Information systems auditing, control or security experience.

You need to have five years of IS audit experience, with waivers of up to two years given, based on auditing experience, graduate degree or teaching experience in a related field. This experience could even be gained after passing the examination.

3. Adherence to the Code of Professional Ethics.
ISACA has formulated the Code of Professional Ethics. You must read and abide by the same.

4. Adherence to the continuing professional education program.

You have to ensure that you are keeping your knowledge up-to-date by clocking 120 hours in three years in acquiring the knowledge by means of attending lectures, giving lectures or doing work for the ISACA local chapter.

5. Compliance with the Information Systems Auditing Standards.

You have to adhere to the IS Audit Standards as promulgated by ISACA.

Apart from these, you have also to pay various fees like membership fees, certification fees, local chapter fees and the examination fees. All these details are available on the website, www.isaca.org.

Other certifications involve like CISCO CCSP which is also an advanced level certification.

CCSP – The Golden Egg of CISCO

SYNOPSIS

Cisco’s CCSP (Cisco Certified Security Professional) is an advanced-level certification for IT professionals who are actively involved in developing business solutions and designing and delivering multiple levels of security departments. These individuals typically are responsible for designing and implementing Cisco secure networks. Either the CCNA (Cisco Certified Network Associate) or CCIP (Cisco Certified Internetwork Specialist) is a prerequisite for the CCSP.

The CCSP was established in 2002 and has been most recently changed in the spring of 2003 when its underlying required exams were updated. A candidate must pass five exams in order to achieve the CCSP designation. The CCSP is valid for three years. To recertify, take and pass the current version of appropriate security exams.

Why, the Golden egg?

Until recently I found that the CCSP is the golden egg when it comes to all CISCO certifications. Now days the need for security professional are many fold the actual need a year before. A Cisco Certified Security Professional (CCSP) is required by an organisation, which is in the process of expanding its computer network and thus, require adding enhanced security parameters to the network. This will help the organisation to tackle different types of security threats. And as I mentioned before with most of the businesses adopting high-end technology the demand for CCSP professionals has increased many folds. Also since the supply is lesser than the demand, a CCSP pro is getting an average salary around 50,000$ per month.

The Institutes

With increasing demand of these professionals, the institutes providing CCSP training courses have also increased in number. The growing numbers has no doubt provided a freedom of choice but has also led to confusion among aspirants. Here are important points you must learn about these courses.

The CCSP training curriculum emphasizes:

• Cisco Router IOS (ISR) and Catalyst Switch security features
• Adaptive Security Appliance (ASA)
• secure VPN connectivity
• Intrusion Prevention Systems (IPS)
• Cisco Security Agent (CSA)
• Security Enterprise and Device Management
• Network Admission Control (NAC)

Techniques to optimize these technologies in a single, integrated network security solution are also included. In addition, CCSP leverages the new CCNA Security certification as a prerequisite.

Advantages of CCSP Training Courses

There are many advantages of getting enrolled with CCSP training courses, rather than buying self-study materials. The lab activities, query solving, assessments, hand-on knowledge gaining and many other benefits are associated with these courses. One can get familiar with techniques of maintaining network security by joining these Cisco security training courses.

What do you learn

By participating in CCSP training courses, you can learn various aspects of network security and at the same time learn the tips and tracks of passing the exam with good grades. You can get familiar with various security aspects like control of intrusions, installation of secure virtual private networks and similar components, required for making the organization functioning smoother than before. These courses teach the individuals to detect security threats and handle them with perfection, without letting them harm the network integrity in any way.
CCSP training courses are helpful in many ways, provided you join the best destination for these courses. You can easily assess an institute on the basis of lab equipments, proficiency of instructors, prices offered and its reputation.

CISCO’s definition of CCSP: CCSP Certification

Cisco Certified Security Professional (CCSP®) validates advanced knowledge and skills required to secure Cisco networks. With a CCSP certification, a network professional demonstrates the skills required to secure and manage network infrastructures to protect productivity, mitigate threats, and reduce costs. The CCSP curriculum emphasizes Cisco Router IOS (ISR) and Catalyst Switch security features, Adaptive Security Appliance (ASA), secure VPN connectivity, Intrusion Prevention Systems (IPS), Cisco Security Agent (CSA), Security Enterprise and Device Management, Network Admission Control (NAC) as well as techniques to optimize these technologies in a single, integrated network security solution. In addition, CCSP leverages the new CCNA Security certification as a prerequisite.

CCSP VS CISSP –

Somewhere I found people confusing with these both certifications. Firstly CCSP is Cisco Certified Security Professional conducted by Cisco and CISSP is Certified Internet Security Specialist conducted by IC2.  Both CCSP and CISSP are not for beginner level. You need to have industry experience in Networking Security to write those exams. CCSP (consists of 5 papers) need 2 years experience and CISSP (1 paper) needs 4 years of exp.

One common thing they are both Advanced Level Examinations.

Conclusion:   These certifications are an indicative list only; apart from this for getting a good job you need good perseverance, hard work, smart personality and several other factors.  Remember that a certification is not a substitute for Higher education, you can always do your masters in information Security from Indian and foreign university.

Wish you all the best in your career in information security!!

External Sources:  www.cisco.com

www.isaca.org

Compiled by ,
Gobind.V
Business Development Manager

]]> http://www.getsetgrow.org/2009/12/certification-choices-for-a-career-in-information-security/feed/ 0 http://www.getsetgrow.org/2009/07/storage-area-network-san/ http://www.getsetgrow.org/2009/07/storage-area-network-san/#comments Sun, 26 Jul 2009 08:39:28 +0000 Admin http://www.getsetgrow.org/?p=674

Many of our readers started asking about their careers in networking & most of them had one motive, to become a NETWORK ADMIN. To be said SAN or Storage Area Network is a also a career in which you would be administering a part of a network setup. To be more precise Network admins would be responsible for handling, say they would handling only bytes of data. But as a SAN admin, you would be handling TERA Bytes of data. I think you better know the difference between those!

What is SAN?

A Simple definition – A storage area network (SAN) is an architecture to attach remote computer storage devices (such as disk arrays, tape libraries, and optical jukeboxes) to servers in such a way that the devices appear as locally attached to the operating system. Although the cost and complexity of SANs are dropping, they are uncommon outside larger enterprises. A SAN is a network of storage devices that are connected to each other and to a server. In some configurations a SAN is also connected to the network. It is forecast to become the data storage technology of choice in the coming years.

NAS – NETWORK ATTACHED STORAGE

Network attached storage (NAS), in contrast to SAN, uses file-based protocols such as NFS or SMB/CIFS where it is clear that the storage is remote, and computers request a portion of an abstract file rather than a disk block.

Careers

There are many careers in these starting from simple HBA RAID controllers to Bit complex NAS. Finally they end up with High complex SAN systems which are employed in huge enterprises. They may sound a bit complex, maybe I said that before, But One thing if you can master these SAN devices not only you would be earning a lot it is one of the better careers to grow with.

Some SAN Manufacturers:  LSI , Promise Vtrak Systems, Adaptec

Some certification to start with –

Storage Networking Certification Program (SNCP)

The SNIA Storage Networking Certification Program (SNCP) provides a strong foundation of vendor-neutral, systems-level credentials that integrate with and complement individual vendor certifications. The structure of the SNCP has been enhanced to reflect the advancement and growth of storage networking technologies over the past few years, and to provide for expanded offerings in the future. Through evolving and enhancing the SNCP, the SNIA is establishing a uniform standard by which individual knowledge and skill sets can be judged.

* Validate your skills and knowledge

* Gain peer recognition

* Make yourself more valuable to your company

* Target and build upon the skills you have as an industry professional

For More information on how to do this certification, you can refer here

Future of SAN is Virtualization

Storage virtualization refers to the process of completely abstracting logical storage from physical storage. The physical storage resources are aggregated into storage pools, from which the logical storage is created. It presents to the user a logical space for data storage and transparently handles the process of mapping it to the actual physical location. This is currently implemented inside each modern disk array, using a vendor’s proprietary solution. However, the goal is to virtualize multiple disk arrays, made by different vendors, scattered over the network, into a single monolithic storage device, which can be managed uniformly.

For latest news in the SAN world

Any queries and comments are welcome…

Compiled by

Gobind V
Business Development Manager,
GSG

Microsoft conducts Virtual Techdays is an E-learning event for the developers, IT Pro and designer community. The fifth edition of this event is scheduled to be held on 13-15 May, 2009. You may like to visit the virtual tech days site and register with your hotmail or windows live ID (required).

There will be technical sessions in the following areas

For Developers

Web Development Platform

Client Development

Business Intelligence

For IT Pros

Administering Windows Server 2008

Managing your Enterprise

Client Infrastructure

If you have missed previous editions of Virtual Tech Days you can download it here.

Happy Learning!

We can say Software Engineer (SE) as SACK OF ENERGETIC PERSONS. Their job (Career) starts from Designing, Coding, testing, upgrading, and integrating with specific things and also implementation. We have plenty of languages includes C, C++, JAVA, DOTNET, VB, XML, Cold Fusion, PHP, HTML etc depending on the application and purpose. These languages are not going to stand with all your coding life, new languages will evolve and, the present languages will become basic for other languages. As a SE one should know about the new evolving technologies, trends and update periodically. Even in recession times you can survive if you have strong programming skills and self confidence.

How to become a Successful Software Engineer?

• Ability to learn by own is must needed skill as an engineer because, field is  constantly  changing.

• Time management and pressure handling skills are must need quality.

• Strong in mathematical aspects will be an added advantage.

• Practical knowledge is more important to think a concept and try to do by yourself, and with availability of reference online which will help you to know about lot of new concepts.

• Be strong in any one of the hot language.

• Communication skills are very important.

• Learn C as soon you can, even though c is rarely used program, but it is the base for all languages. Each and every language implements c logic.

• Working environment is completely different form its not like exam where you need the exact answers, it’s completely an R&D (Research and development).The only thing is that you have to learn and know logics of functions and how it works.

• As a fresher your academic profile will have priority once you got a job, then your experience comes first. Employers will look for good experience with real stuffs. So use your academic days, working for lot of research projects and be strong in any one of the programming languages.

In addition to the strong technical skills required by the position, software engineers need to possess strong interpersonal skills, as the job often requires them to work closely with ordinary users, other technical personnel, managers and upper management personnel, as well as various vendors and suppliers.

International Certifications which you can choose

Microsoft Certifications:

• MCTS .NET 2.0 Web
• MCTS .NET 2.0 Windows
• MCAD .NET
• MCSD .NET

CIW Certifications:

CompTIA Certification:

• Project+

Sun Certifications

• Sun Certified Java Associate (SCJA)

• Sun Certified Java Programmer (SCJP)

• -Sun Certified Java Developer (SCJD)

• Sun Certified Web Component Developer (SCWCD)

• -Sun Certified Business Component Developer (SCBCD)

• -Sun Certified Developer For Java Web Services (SCDJWS)

• Sun Certified Mobile Application Developer (SCMAD)

• -Sun Certified Enterprise Architect (SCEA)

Choosing your career is like choosing your life.

GET guidelines from us SET Yourself GROW faster

One day as I was walking past a Engineering college in Chennai, I just mingled with a group of students there & asked them,

Q: What career path would you like to have in the future?

A: “SOFTWARE ENGINEER”

What’s new in this field?

Nowadays most of students are thriving to get into a software field, but only 0.1% people know about the bright opportunities available in the Networking world when they come out of their college studies. Once they are trying to start a career, all of them are looking to get into Software biggies & launch their career. With this recession, to me I think we are not getting as much outsourced projects, particularly to India. Also, even currently RECESSION is on, I don’t think it has affected much the Networking industry. For me, I think the software was HIT BAD.

So, what I am suggesting for students is that during your college days, get an idea on how big is this networking field & the various ways to get into it. Most of the students I met that day didn’t have A SINGLE IDEA to get into this career path.

Some TIPS to get into a Networking Career:

GSG Suggests 3 STEP CAREER PATH FOR NETWORKING ASPIRANTS:

1) Try to Finish off CCNA – a CISCO Certification.

2) Strive for a decent career record (10th & 12th)

3) Most Important thing is you should have GOOD Communication & Soft Skills

If you are having these Skills & If you are interested to get into this Field of NETWORKING, Go for it!!

TURN SOCIAL NETWORKING INTO A CAREER ON NETWORKING!!

Orkut, Face book, MySpace, LinkedIn, Craigslist, message boards and chat rooms – these venues were made for self-promotion, right? They are known as places for people to “get ahead,” even if it’s just socially. However, when it comes to professional advancement, social networking and marketing can be a person’s undoing. Whether its racy photos from last weekend’s party or an old resume with information that should no longer be public, it can be stumble upon by a prospective employer. So if a professional career factors anywhere into your future, tread cyberspace with great caution.

Promote yourself in those fields!!

About CISCO Certifications:

I would like all the people who like to get into this field should do this Course.

CCNA: CISCO CERTIFIED NETWORK ASSOCIATE

Cisco has added a new entry level certification to its training program. The Cisco Certified Entry Networking Technician (CCENT) can be considered a half-way point to the current entry-level program, the Cisco Certified Networking Associate (CCNA), which has been moved up the stack. Also, Cisco Certified Network Associate (CCNA®) validates the ability to install, configure, operate, and troubleshoot medium-size route and switched networks, including implementation and verification of connections to remote sites in a WAN. CCNA curriculum includes basic mitigation of security threats, introduction to wireless networking concepts and terminology, and performance-based skills. This new curriculum also includes (but is not limited to) the use of these protocols: IP, Enhanced Interior Gateway Routing Protocol (EIGRP), Serial Line Interface Protocol Frame Relay, Routing Information Protocol Version 2 (RIPv2), VLANs, Ethernet, access control lists (ACLs).

How to become a Networking Professional?

Many view computer networking as one of the best and “hottest” career fields available today. Some claim that a serious shortage of qualified people to fill these networking jobs exists, and these claims may lure some people into the fray hoping for an easy position with a fast-growing company.

Don’t be fooled! Debates over the actual extent of any “shortages” aside, networking involves mostly hard work, and competition for the high-quality positions will always be strong. Continue reading to learn more about beginning or expanding a career in networking, and pick up some valuable job-hunting tips that also apply to many other types of technical careers.

Job Titles

Several types of positions exist in networking, each with different average salaries and long-term potential, and one should possess a clear understanding of these. Unfortunately, job titles in networking and in Information Technology (IT) generally, often lead to confusion among beginners and experienced folks alike. Bland, vague or overly bombastic titles often fail to describe the actual work assignments of a person in this field.

The basic job titles one sees for computer networking and networking-related positions include

Network Administrator

Network (Systems) Engineer

Network (Service) Technician or Technical Support Engineers

Network Programmer/Analyst

Network/Information Systems Manager

Why u Chose GETSETGROW‘s Path to Success?

We, the GSG team comprise of Engineers, IT professionals & Managers working from different fields of expertise & came big in life. Also, GSG aims in providing the Best in Class Career guidance for Students, to guide them in the perfect way for their FUTURE.

Discussion and comments are welcome!!

Compiled by Gobind V

Let us enter into the world of NETWORKING TO BE THE KING OF THE FUTURE!!