Software Process Improvement: Continuous Integration and Testing for Web Application Development

Abstract

Software testing is not the only approach to improve software quality but, perhaps, one of the most important ones. This is because testing gives us the confidence that the software will work as it should in its intended environment. In this thesis the author introduces a Software Process Improvement (SPI) technique for conducting automated web application security testing. The continuous integration process provides rapid and automatic feedback on the security of the web applications under development. Continuous integration has improved the software development process of a company specialized in web-based systems. We found out that the testing technique we suggested can be used as an additional testing mechanism with the existing approaches.

Asiasanat:Software Process Improvement (SPI), software quality, testing, continuous integration, web application security assessment