Software Test Attacks to Break Mobile and Embedded Devices

Jon Hagar is the principal (CEO/CTO) and senior software test engineer at Grand Software Testing. For over 30 years he has worked on systems and software engineering, specializing in testing/verification and validation. He is the lead editor on ISO/IEC/IEEE29119 Software Test Standard, a member of the IEEE1012 V&V Plan working group, and co-chair on the OMG UML testing profile standard. Jon holds a patent on web test technologies and has published numerous articles on software reliability, testing, test tools, formal methods, and embedded systems. He has a B.S. in mathematics with a specialization in civil engineering and software from Metropolitan State College in Denver, Colorado, and an M.S. in computer science with a specialization in software engineering and testing from Colorado State University.

"Using the framework of attacks popularized by James Whittaker’s books, Jon Duncan Hagar describes those that are relevant here and extends the approach with new attacks specifically for mobile and embedded systems. He provides detailed information and guidance on how to test more effectively and efficiently in the mobile and embedded world. … Jon shows you what to test and how to test, giving ideas that you can use to do better testing of mobile devices now and save yourself serious trouble later on.Jon’s extensive experience (much of it in the embedded world), his thorough research, and his deep knowledge give this book a solid foundation and provide helpful guidance and steps to take in applying testing attacks to mobile and embedded devices."—From the Foreword by Dorothy Graham, Software Testing Consultant"Every tester who wants to keep current needs to read this book, and you can read with confidence knowing you are being guided by the best in this business. … Learn by doing, with this book as your guide."—From the Foreword by Lisa Crispin, Agile Testing Coach and Practitioner

• Setting the Mobile and Embedded Framework. Developer Attacks: Taking the Code Head On. Control System Attacks. Hardware Software Attacks. Mobile and Embedded Software Attacks. Time Attacks: It's about Time. Human User Interface Attacks: The Limited (and Unlimited) User Interface. Smart and/or Mobile Phone Attacks. Mobile/Embedded Security. Generic Attacks. Mobile and Embedded System Labs. Some Parting Advice. Appendices. References. Glossary. Index.