- Performance and Scalability
Conduct a performance test of your application. Choose one of your backend API.
Test your application with 1, 2…N clients. Draw the throughput and the response time curves. N should be chosen such that utilization of the server is less than 60%. Assume 3 seconds “think time” between user requests. You can use a load testing program such as JMeter.
Record the time the thread sends the request, record the time the thread gets back the response; the difference is the response time. Repeat that for 1, 2…N threads. Check the slides for the general shape of the response time…By response time we mean the average across all clients(threads)
- Security
The store website should run under HTTPS, SSL. SSL is activated by setting up the application server, you do not have to program anything special in your application.
- “Checkout” page and “Confirm Order” action must be secured so that a login is required and the password is not passed in plain text.
- The visitor MUST type in their credit card each time. It should not be stored.
- The application should be tested for two common vulnerabilities: SQL injection and cross-site scripting.
- Document one test case for each threat ( see the design document).