User stories are the mechanism used for planning functionality to be built in a particular iteration of an eXtreme Programming project. They consist of three parts: the Card, the Conversation and the Confirmation (acceptance tests.) This presentation introduces the concept of user stories, how they are used during estimating and planning and how they are different from Use Cases and other requirements artifacts.

Keynote

Automated testing is a cornerstone of agile development. An effective testing strategy will deliver new functionality more aggressively, accelerate user feedback, and improve quality. However, for many developers, creating effective automated tests is a unique and unfamiliar challenge. In this session, Gerard uses the "code smells" metaphor to show us how to improve the return on investment of our tests by making them easier to write, read and maintain.

Come see the basics and a few not so basics of Rhino Mocks

The presentation will focus on the reasons why you should be using TDD.  As well as provide the audience with a enough knowledge to begin applying TDD in their day to day jobs.

It is very easy to minimize the attack surface of your application and therefore reducing what an attacker can do if they exploit a web application. This is done using code access security built-in to the .NET framework and is easier than one might think!

Keynote

Windows Workflow Foundation (WF) is Microsoft’s technology for building workflow enabled applications. During the session I will cover the underlying architecture of WF and the core concepts and ideas that form the heart of WF. Moreover, I will provide an illustration of the architectural decisions behind WF and how the runtime works. Finally, I will go through the execution model of activities, with details of activity automaton, bookmarking, scheduling and threading model for WF runtime  

The 9/11 terrorist events have changed the industrial world and mission critical systems forever. This change has greatly impacted industry that operates mission critical systems. This presentation provides a high level generic fundamental view of cyber security. This view will enable us to better grasp security concepts by focusing on science and its application. The author further describes how to design a holistic integrated security system of technologies. It is only through the understanding of security concepts holistically that one can make effective and optimum high-level security decisions. This session will conclude with participants trying to secure a hypothetical system.

IT systems and industrial controls systems have many similarities and differences. Their technologies are similar but their utilization domains are different. The goal of this session is to provide awareness of these systems and their security impact to energy sector. As IT people, we add value to our employers by helping them to reduce risks in their overall systems development investments. In conclusion, some lessons learned from the Blackout in Eastern Canada and United States back in 2003 will be presented as example.