Don't mock internal functions and methods, mock external dependencies. How to do that? This presentation will present a framework and practical example of creating Surrogate dependencies (think custom proxies, similar to WireMock). They are based on data collected from Integration tests to create environments where target applications can be executed offline and be subject to advanced security, quality and performance testing. All data is stored natively (JSON, XML) and Git is used for content versioning and simulation.
YOU MAY ALSO LIKE:
- Turning TDD Upside Down (SkillsCast recorded in September 2016)
- Uncle Bob Martin's Clean Code Workshop on Agile Software Craftsmanship (in London on 2nd - 3rd December 2019)
- CloudNative London 2019 (in London on 25th - 27th September 2019)
- Keynote by Kris Nova on The Power of Linux Virtualization with Cloud Native (in London on 19th June 2019)
- Fancy Bears Are Not Your Problem: Real World Appsec (SkillsCast recorded in June 2019)
- "Defense in Depth": Trench Warfare Principles for Building Secure Distributed Applications (SkillsCast recorded in May 2019)
Dinis is focused on creating Application Security teams and providing Application Security assurance across the SDL (from development, to operations, to business processes, to board-level decisions). His focus is in the alignment of the business’s risk appetite with the reality created by Applications developed internally, outsourced or purchased. He is also an active Developer and Application Security Engineer focused on how to develop secure applications. A key drive is on 'Automating Application Security Knowledge and Workflows' which is the main concept behind the OWASP O2 Platform.