Heuristic Test Strategy Model (HTSM) by James Bach, Version 5.2.2, 5/20/2015
Identify things that the product can do (functions and subfunctions).
Determine how you’d know if a function was capable of working.
Test each function, one at a time.
See that each function does what it’s supposed to do and not what it isn’t supposed to do.
Look for any data processed by the product. Look at outputs as well as inputs.
Decide which particular data to test with. Consider things like boundary values, typical values, convenient values, invalid values, or best representatives.
Consider combinations of data worth testing together.
Look for sub-systems and functions that are vulnerable to being overloaded or “broken” in the presence of challenging data or constrained resources.
Identify data and resources related to those sub-systems and functions.
Select or generate challenging data, or resource constraint conditions to test with: e.g., large or complex data structures, high loads, long test runs, many test cases, low memory conditions.
Perform multiple activities connected end-to-end; for instance, conduct tours through a state model.
Don’t reset the system between actions.
Vary timing and sequencing, and try parallel threads.
Begin by thinking about everything going on around the product.
Design tests that involve meaningful and complex interactions with the product.
A good scenario test is a compelling story of how someone who matters might do something that matters with the product.
Identify reference materials that include claims about the product (implicit or explicit). Consider SLAs, EULAs, advertisements, specifications, help text, manuals, etc.
Analyze individual claims, and clarify vague claims.
Test the veracity of each claim about the product.
If you’re testing from an explicit specification, expect it and the product to be brought into alignment.
Identify categories and roles of users.
Determine what each category of user will do (use cases), how they will do it, and what they value.
Get real user data, or bring real users in to test.
Otherwise, systematically simulate a user (be careful—it’s easy to think you’re like a user even when you’re not).
Powerful user testing is that which involves a variety of users and user roles, not just one.
What kinds of problems could the product have?
Which kinds matter most? Focus on those.
How would you detect them if they were there?
Make a list of interesting problems and design tests specifically to reveal them.
It may help to consult experts, design documentation, past bug reports, or apply risk heuristics.
Look for or develop tools that can perform a lot of actions and check a lot things.
Consider tools that partially automate test coverage.
Consider tools that partially automate oracles.
Consider automatic change detectors.
Consider automatic test data generators.
Consider tools that make human testing more powerful.
Quality Criteria Categories
Robustness: the product continues to function over time without degradation, under reasonable conditions.
Error handling: the product resists failure in the case of errors, is graceful when it fails, and recovers readily.
Data Integrity: the data in the system is protected from loss or corruption.
Safety: the product will not fail in such a way as to harm life or property.
Learnability: the operation of the product can be rapidly mastered by the intended user.
Operability: the product can be operated with minimum effort and fuss.
Accessibility: the product meets relevant accessibility standards and works with O/S accessibility features.
Aesthetics: the product appeals to the senses.
Uniqueness: the product is new or special in some way.
Necessity: the product possesses the capabilities that users expect from it.
Usefulness: the product solves a problem that matters, and solves it well.
Entrancement: users get hooked, have fun, are fully engaged when using the product.
Image: the product projects the desired impression of quality.
Authentication: the ways in which the system verifies that a user is who he says he is.
Authorization: the rights that are granted to authenticated users at varying privilege levels.
Privacy: the ways in which customer or employee data is protected from unauthorized people.
Security holes: the ways in which the system cannot enforce security (e.g. social engineering vulnerabilities)
Application Compatibility: the product works in conjunction with other software products.
Operating System Compatibility: the product works with a particular operating system.
Hardware Compatibility: the product works with particular hardware components and configurations.
Backward Compatibility: the products works with earlier versions of itself.
Resource Usage: the product doesn’t unnecessarily hog memory, storage, or other system resources
System requirements: Does the product recognize if some necessary component is missing or insufficient?
Configuration: What parts of the system are affected by installation? Where are files and resources stored?
Uninstallation: When the product is uninstalled, is it removed cleanly?
Upgrades/patches: Can new modules or versions be added easily? Do they respect the existing configuration?
Administration: Is installation a process that is handled by special personnel, or on a special schedule?
Supportability: How economical will it be to provide support to users of the product?
Testability: How effectively can the product be tested?
Maintainability: How economical is it to build, fix or enhance the product?
Portability: How economical will it be to port or reuse the technology elsewhere?
Localizability: How economical will it be to adapt the product for other places?
Do you know who your customers are? Whose opinions matter? Who benefits or suffers from the work you do?
Do you know what your customers expect of you on this project? Do you agree?
Maybe your customers have strong ideas about what tests you should create and run.
Maybe they have conflicting expectations. You may have to help identify and resolve those.
Whom can we consult with to learn about this project?
Are there any engineering documents available? User manuals? Web-based materials? Specs? User stories?
Does this product have a history? Old problems that were fixed or deferred? Pattern of customer complaints?
Is your information current? How are you apprised of new or changing information?
Are there any comparable products or projects from which we can glean important information?
Hubris: Does the development team seem overconfident about any aspect of the product?
Defensiveness: Is there any part of the product the developers seem strangely opposed to having tested?
Rapport: Have you developed a friendly working relationship with the programmers?
Feedback loop: Can you communicate quickly, on demand, with the programmers?
Feedback: What do the developers think of your test strategy?
Do you know who will be testing? Do you have enough people?
Are there people not on the “test team” that might be able to help? People who’ve tested similar products before and might
have advice? Writers? Users? Programmers?
Are there particular test techniques that the team has special skill or motivation to perform?
Is any training needed? Is any available?
Who is co-located and who is elsewhere? Will time zones be a problem?
Equipment & Tools
Hardware: Do we have all the equipment you need to execute the tests? Is it set up and ready to go?
Automation: Are any test tools needed? Are they available?
Probes: Are any tools needed to aid in the observation of the product under test?
Matrices & Checklists: Are any documents needed to track or record the progress of testing?
Test Design: How much time do you have? Are there tests better to create later than sooner?
Test Execution: When will tests be executed? Are some tests executed repeatedly, say, for regression purposes?
Development: When will builds be available for testing, features added, code frozen, etc.?
Documentation: When will the user documentation be available for review?
Scope: What parts of the product are and are not within the scope of your testing responsibility?
Availability: Do you have the product to test? Do you have test platforms available? When do you get new builds?
Volatility: Is the product constantly changing? What will be the need for retesting?
New Stuff: What has recently been changed or added in the product?
Testability: Is the product functional and reliable enough that you can effectively test it?
Future Releases: What part of your tests, if any, must be designed to apply to future releases of the product?
Content: What sort of reports will you have to make? Will you share your working notes, or just the end results?
Purpose: Are your deliverables provided as part of the product? Does anyone else have to run your tests?
Standards: Is there a particular test documentation standard you’re supposed to follow?
Media: How will you record and communicate your reports?
Code: the code structures that comprise the product, from executables to individual routines.
Hardware: any hardware component that is integral to the product.
Non-executable files: any files other than multimedia or programs, like text files, sample data, or help files.
Collateral: anything beyond software and hardware that is also part of the product, such as paper documents, web links and content, packaging, license agreements, etc.
Application: any function that defines or distinguishes the product or fulfills core requirements.
Calculation: any arithmetic function or arithmetic operations embedded in other functions.
Time-related: time-out settings; daily or month-end reports; nightly batch jobs; time zones; business holidays; interest calculations; terms and warranty periods; chronograph functions.
Transformations: functions that modify or transform something (e.g. setting fonts, inserting clip art, withdrawing money from account).
Startup/Shutdown: each method and interface for invocation and initialization as well as exiting the product.
Multimedia: sounds, bitmaps, videos, or any graphical display embedded in the product.
Error Handling: any functions that detect and recover from errors, including all error messages.
Interactions: any interactions between functions within the product.
Testability: any functions provided to help test the product, such as diagnostics, log files, asserts, test menus, etc.
Input: any data that is processed by the product.
Output: any data that results from processing by the product.
Preset: any data that is supplied as part of the product, or otherwise built into it, such as prefabricated databases, default values, etc.
Persistent: any data that is stored internally and expected to persist over multiple operations. This includes modes or states of the product, such as options settings, view modes, contents of documents, etc.
Sequences/Combinations: any ordering or permutation of data, e.g. word order, sorted vs. unsorted data, order of tests.
Cardinality: Numbers of objects or fields may vary (e.g. zero, one, many, max, open limit). Some may have to be unique (e.g. database keys).
Big/Little: variations in the size and aggregation of data.
Noise: any data or state that is invalid, corrupted, or produced in an uncontrolled or incorrect fashion.
Lifecycle: transformations over the lifetime of a data entity as it is created, accessed, modified, and deleted
User Interfaces: any element that mediates the exchange of data with the user (e.g. displays, buttons, fields, whether physical or virtual).
System Interfaces: any interface with something other than a user, such as other programs, hard disk, network, etc.
API/SDK: Any programmatic interfaces or tools intended to allow the development of new applications using this product.
Import/export: any functions that package data for use by a different product, or interpret data from a different product.
External Hardware: hardware components and configurations that are not part of the shipping product, but are required (or optional) in order for the product to work: systems, servers, memory, keyboards, the Cloud.
External Software: software components and configurations that are not a part of the shipping product, but are required (or optional) in order for the product to work: operating systems, concurrently executing applications, drivers, fonts, etc.
Internal Components: libraries and other components that are embedded in your product but are produced outside your project.
Users: the attributes of the various kinds of users.
Environment: the physical environment in which the product operates, including such elements as noise, light, and distractions.
Common Use: patterns and sequences of input that the product will typically encounter. This varies by user.
Disfavored Use: patterns of input produced by ignorant, mistaken, careless or malicious use.
Extreme Use: challenging patterns and sequences of input that are consistent with the intended use of the product.
Input/Output: when input is provided, when output created, and any timing relationships (delays, intervals, etc.) among them.
Fast/Slow: testing with “fast” or “slow” input; fastest and slowest; combinations of fast and slow.
Changing Rates: speeding up and slowing down (spikes, bursts, hangs, bottlenecks, interruptions).
Concurrency: more than one thing happening at once (multi-user, time-sharing, threads, and semaphores, shared data).
More Maps From User
Share this map
Copy the code to embed this map into your article. The embeded map can even be zoomed in / out