Security Testing - Learning Resources

Next reading list for Security Testing

• Pentesterlab bootcamp tutorials
• Game Over: Damn Vulnerable Web Application
• SQL Injection - Mozilla Security Learning Center
• Virtual Security Lab Setup - OWASP Broken Web Apps, Webgoat, & ZAP
• SQL Injection
• Databases—Vulnerabilities, Costs of Data Breaches and Countermeasures

Apps to perform live security Tests

• Damn Vulnerable Web Application
• OWASP Broken Web Applications Project
• Pentesterlab exercises
• OWASP Broken Web Applications VM Video Walkthru

More Reads

• Deep End Research
• .NET Penetration Testing Cheat Sheet
• Bruteforce vs Denial of Service
• Stackexchange Security is good start for security related questions
• Video: Building Custom Android Malware for Penetration Testing
• Intercepting SSL traffic using WebScarab

Happy Learning!!!

Interactive Learning - Good Learning Sites

Wish you all a very Happy, Prosperous and Successful 2014

Compiled list of good interactive learning sites

• Very Good Learning Material - Data Structure Visualizations
• Interactive VIM Tutorial
• Learning R
• Interactive Python

More Reads

How to Learn VIM
R Tutorial
Data Analysis Tutorial
General Data Science

Happy Reading!!!

Compiled List of Short Talks on Career Success

Happy Learning!!!

Programming Learning Resources

Good Collection of Programming Learning Resources for Beginner's

Coding Tips - Link

AppendTo

LearnStreet

Code Avengers

Hackbright Academy

Another Good Collection of Learning Materials

Udemy

Learn to Code from Code Academy

Learn Web Design from Tree House

Read Quote of Tiana Clark's answer to Learning: I'm tired of watching videos or reading books and not remembering anything. How can I be hands on with learning? on Quora


Read Quote of Abhishek Choudhary's answer to Learning to Program: What should I do to improve my programming skills in a short amount of time? on Quora

Read Want to learn Ruby on Rails? Start Here…


Read Quote of David Byttow's answer to Computer Programming: How do you keep your programming skills sharp? on Quora

Read Quote of Nagesh Salunke's answer to Computer Programming: What are the software concepts that every programmer should know? on Quora

Happy Learning!!!

Database Reads

Good Read - 6 Part Series on CAP Theorem

An analysis of the CAP Theorem

CAP Theorem Part 2: What is the CAP Theorem?

CAP Theorem Part 3: Definitions and terminology

CAP Theorem Part 4: The relationship between Consistency, Availability, and Partition Tolerance

CAP Theorem Part 5: Implications of the relationship between Consistency, Availability, and Partition Tolerance

Cap Theorem Part 6: Conclusion


Happy Reading!!!

Database Internals [Good Reads]

Please download and read white paper 'OLTP Through the Looking Glass, and What We Found There'

The whitepaper provides more details on current architecture of OLTP RDBMS Systems. I can closely relate it with MSSQL Server. It covers the key architecture details. The Paper evaluates options by eliminating some of the features based on current hardware systems and demonstrates significant performance gains

 

At a beginner level some of architecture keywords / concepts good to learn are

• WAL (Write Ahead Logging)
• Log Manager
• Buffer Manager
• Two Phase Locking
• Concurrency 
• Eventual Consistency
• Transaction Manager

I am posting some relavant simple explanations of the same based on MSDN documentation. WAL -

 

Write Ahead Logging (Source - Link)

 

 

Buffer Manager - Page is fetched to main memory through Buffer Manager (Source - Link)

  

Two Phase Locking - A detailed note of how transaction is executed from Brent Ozar Post

 

Concurrency Control - Governed by Isolation levels, Earlier discussed in same blog

 

Log Manager - Manages Logging, WAL

 

Eventual Consistency - Over a period of time the data will be consitent across different nodes (databases) distributed over network. Read More @ Consistency models in nonrelational dbs 

 

 

More Reads  

• ColumnStores vs. RowStores: How Different Are They Really?
• Materialization Strategies in a Column-Oriented DBMS
• Query Execution in Column-Oriented Database Systems

 

Happy Reading!!! 

Good Tech Talk - Making Better Software - QA & DEV

Today I checked this tech talk. This is very very good. **MUST VIEW** for passionate DEV / QA / IT Pro. Complete Tech Talk is inspiring, offers a lot of improvement ideas

 

Make Better Software: The Training Series - Module 2

Between 24:31 to 30:52 minutes

Very Good Joel talk on test skills, testing competency and also covers **Agile QA**

 

Summary of QA Talk

• Benefits of Having QA in a Team
• Benefits of Rapid Feedback between Dev & QA
• Tools for testing + Functional testing both are critical

Between 32:34 to 34:37 minutes

• How Writing code vs Developing a Great product differs?

Between 44:18 to 48:54

• Intrinsic and Extrinsic motivation
• Intrinsic Motivation matters!!

 

Hope you enjoyed the tech talk. Happy Listening!!!

Interesting Post - Learn to Code (Startup Tips)

This post is to highlight few lines from Post on Learning to Code. If you have plans to do a startup it is useful and advantageous if you know to write code, passion for technology.

Happy Learning!!!

Recommendation Engine for Ecommerce Sites

Excellent post on designing Recommendation Engine. Very good approach by Ricky Ho.

 

More Reads

• A Graph-Based Movie Recommender Engine (Very Good)
• Page Rank from Wikipedia - - Information on the web could be ordered in a hierarchy by "link popularity"
• Fraud Detection Methods

 

 Happy Reading!!!

Good Read - Product Development for Startups

Good Reads

• Product Development for Startups.
• Dropbox Startup Lessons Learned.

Happy Reading!!!

Amazon Vs Ebay Business Model Comparision

Good Comparision on Amazon Vs Ebay Business Models

Guest Post: Amazon vs. eBay: And the Winner Is… ?
Amazon vs. EBay: Who's the Online Sales King?
eBay vs Amazon – Who will win ?
The Mind of Jeff Bezos

Architecture Reads

Zen of Architecture
Amazon Architecture
Front Line Internet Analytics at Amazon.com
A/B testing at Amazon and Microsoft
Beyond A/B testing: hypothesis testing for startups
Software Testing Cage Match: Amazon.com vs. Microsoft 
Amazon recommendations system
Amazon Retail Analytics
Speed vs. Certainty in A/B Testing
The Canonical Cloud Architecture
Google Architecture
How Google Serves Data from Multiple Datacenters
Improving Global Application Performance, continued: GSLB with EC2
What The Heck Is Cloud Computing?
What The Heck Is Cloud Computing? – A Brief Re-Look

Virtual Stress-free Testing in the Cloud

View more PowerPoint from guest2e9c5f40

Happy Learning!!!