??????????????

???????????????????????????????????Щ????С???????????????????????????????????????????????????????????bug????????????????????passion??experience. ?????????????????????????????techniques???????????????????????????檔??????????????????°ɡ?

?????         Passion?? Experience

?????????experience??passion??????????????????????????????????????feature???code review?????office????????5:00am?? ?????????????security bug. ????????????idea????????????????????????賿????????С????????passion. ??????????????????????????bug?????????????????????????????????????????????

?????         Understand features deeply

????o   Design

????o   Architecture

????o   Implementation

????o   Customer requirements

?????????Щ???????????????????????????????????bug??

?????         Tools

????o   App verifier

????o   Driver verifier

????o   Fuzzing tools

????o   Etc.

????Some tools are extremely useful. Some tools are very helpful. ?????????????????????????????????bug?????90%????ù鸚????Щtools????????????????????????????Щtools???????????????????????????????????????????????????bug?????????????????????????????????????????????????????????????????????

?????         Code review+Debugging

????o   Security audit: buffer overflow?? memory leak?? AV

????o   Logic review

????Debugging ????????????????????????????????????????????????????????????????????????feature???????bug???????????????? feature?????????????????????????鳤???н??棬??????????????????????????????Code review??debugging??????????????????????????code review??????code audit?? ??????????????????????????????buffer overflow?? memory leak?? AV ?????????logic review?? ???????????????????Code review???bug farm?? ??????????????????bug?????檔

?????         Tenet tests:

????o   Reliability: tools?? stress

????o   Security: fuzzing?? code audit

????o   Performance: Xperf

??????????????????functional test?????Reliability?? Security??Performance????????????????????????????t???????????????????????????????????feature???????????????Lab??????Щ???????????????bug????Щ??????????bug??

?????         Integration test

?????????????????????component????????bug??????????????????????????????component?? ????????????cross feature??scenario???в????????????bug??

?????         Looking for test holes

????o   Test cases

????o   Test tools

????o   Test owner history

????o   Old bugs analysis

?????????????????????????????????????bug??????????????cover??test case?? ??????????μ?test tool???????????????????????component???test owner?????????????????????????Щbug??????bug????п?????????????????