RE: [Owasp-input-api-developers] Testing tool/framework and development platform survey

[Gabriel L. <ga...@bu...>]

On Sun, 2002-08-18 at 15:42, Alex Russell wrote:
> On Sun, 18 Aug 2002, Christopher Todd wrote:
> 
> > Interesting idea; I was thinking more along the lines of iterative
> > code-test-code-test, 
> 
> I think that whatever we do, we'll need that capability.
> 
> > but your suggestion would work better in an automated
> > nightly build type of situation.  
> 
> Yeah, I thought of that...Perhaps if there was a set of scripts that (on
> demand) made a CVS checkout, tested it, and reported the results
> more-or-less instantly?

Yes. We are really going to need something of this type. As a security
product, we really do need to focus on unit testing and system testing
as a key portion of the development. With many authors and new
contributors as is common in open source projects, we need to build some
tools that help assure that checkins don't break the security of the
system. I would suspect nightly builds with test run and the ability for
developers to do a test run would be ideal.




-gabe

-- 
Gabriel Lawrence
CTO
Butterfly Security <www.butterflysecurity.com>
(408) 333-9948
ga...@bu...