ISTQB Glossary of Terms Used in Software Testing - V4.2 2023
ISTQB Glossary of Terms Used in Software Testing - V4.2 2023
Version 4.2
Oct 30, 2023
Search results
Keywords only
Exact matches first
accessibility Version 2
The degree to which a component or system can be used by people with the widest range of characteristics and capabilities to achieve a
specified goal in a specified context of use.
Reference: After ISO 25010
accountability Version 1
The degree to which the actions of an entity can be traced uniquely to that entity.
Reference: After ISO 25010
adaptability Version 3
The degree to which a component or system can be adapted for different or evolving hardware, software or other operational or usage
environments.
Reference: After ISO 25010
See also: portability
analyzability Version 2
The degree to which an assessment can be made for a component or system of either the impact of one or more intended changes, the
diagnosis of deficiencies or causes of failures, or the identification of parts to be modified.
Reference: After ISO 25010
See also: maintainability
anomaly Version 1
A condition that deviates from expectation.
Reference: After ISO 24765
anti-malware Version 1
Software that is used to detect and inhibit malware.
See also: malware
attacker Version 1
A person or process that attempts to access data, functions or other restricted areas of the system without authorization, potentially with
malicious intent.
See also: hacker
audit Version 2
An independent examination of a work product or process performed by a third party to assess whether it complies with specifications, standards,
contractual agreements, or other criteria.
Reference: After ISO 24765
authentication Version 1
A procedure determining whether a person or a process is, in fact, who or what it is declared to be.
See also: authorization
authenticity Version 1
The degree to which the identity of a subject or resource can be proved to be the one claimed.
Reference: ISO 25010
authorization Version 1
Permission given to a user or process to access resources.
See also: authentication
availability Version 2
The degree to which a component or system is operational and accessible when required for use.
Reference: After ISO 25010
botnet Version 1
A network of compromised computers, called bots or robots, which is controlled by a third party and used to transmit malware or spam, or to
launch attacks.
branch Version 2
A transfer of control between two nodes in the control flow graph of a test item.
capacity Version 1
The degree to which the maximum limits of a component or system parameter meet requirements.
Reference: After ISO 25010
capture/playback Version 2
A test automation approach in which inputs to the test object are recorded during manual testing to generate automated test scripts that can be
executed later.
Synonyms: capture/replay, record/playback
certification Version 1
The process of confirming that a component, system or person complies with specified requirements.
closed-loop-system Version 1
A system in which the controlling action or input is dependent on the output or changes in output.
Reference: Bakshi
compatibility Version 1
The degree to which a component or system can exchange information with other components or systems, and/or perform its required functions
while sharing the same hardware or software environment.
Reference: After ISO 25010
complexity Version 1
The degree to which the design or code of a component or system is difficult to understand.
Reference: After ISO 24765
compliance Version 2
Adherence of a work product to standards, conventions or regulations in laws and similar prescriptions.
Reference: IREB Glossary
component Version 2
A part of a system that can be tested in isolation.
Synonyms: module, unit
concurrency Version 1
The simultaneous execution of multiple independent threads by a component or system.
confidentiality Version 1
The degree to which a component or system ensures that data are accessible only to those authorized to have access.
Reference: After ISO 25010
connectivity Version 1
The degree to which a component or system can connect to other components or systems.
Reference: After ISO 2382
coverage Version 3
The degree to which specified coverage items are exercised by a test suite, expressed as a percentage.
Synonyms: test coverage
dashboard Version 1
A representation of dynamic measurements of operational performance for some organization or activity, using metrics represented via
metaphors such as visual dials, counters, and other devices resembling those on the dashboard of an automobile, so that the effects of events or
activities can be easily understood and related to operational goals.
debugging Version 2
The process of finding, analyzing and removing the causes of failures in a component or system.
defect Version 2
An imperfection or deficiency in a work product where it does not meet its requirements or specifications.
driver Version 2
A component or tool that temporarily replaces another component and controls or calls a test item in isolation.
Synonyms: test driver
effectiveness Version 2
The extent to which correct and complete goals are achieved.
Reference: ISO 9241
See also: efficiency
efficiency Version 3
The degree to which resources are expended in relation to results achieved.
Reference: IREB Glossary
See also: effectiveness, performance efficiency
emulator Version 2
Software used during testing that mimics the behavior of hardware.
See also: simulator
encryption Version 1
The process of encoding information so that only authorized parties can retrieve the original information, usually by means of a specific
decryption key or process.
epic Version 1
A large user story that cannot be delivered as defined within a single iteration or is large enough that it can be split into smaller user stories.
Reference: Agile Alliance
error Version 1
A human action that produces an incorrect result.
Reference: ISO 24765
Synonyms: mistake
failed Version 1
The status of a test result in which the actual result does not match the expected result.
failover Version 1
The backup operational mode in which the functions of a system that becomes unavailable are assumed by a secondary system.
failure Version 2
An event in which a component or system does not perform a required function within specified limits.
Reference: After ISO 24765
finding Version 1
A result of an evaluation that identifies some important issue, problem, or opportunity.
firewall Version 1
A component or set of components that controls incoming and outgoing network traffic based on predetermined security rules.
hacker Version 1
A person or organization who is actively involved in security attacks, usually with malicious intent.
See also: attacker, script kiddie
Abbreviation: HiL
Reference: Automotive SPICE
hashing Version 1
Transformation of a variable length string of characters into a usually shorter fixed-length value or key. Hashed values, or hashes, are commonly
used in table or database lookups. Cryptographic hash functions are used to secure data.
See also: salting
heuristic Version 1
A generally recognized rule of thumb that helps to achieve a goal.
hyperlink Version 1
A pointer within a web page that leads to other web pages.
inspection Version 3
A type of formal review that uses defined team roles and measurement to identify defects in a work product, and improve the review process and
the software development process.
Reference: After ISO 20246
See also: peer review
installability Version 2
The degree to which a component or system can be successfully installed and/or uninstalled in a specified environment.
Reference: After ISO 25010
See also: portability
internationalization Version 1
The process of making a system suitable for international user groups.
See also: localization
interoperability Version 2
The degree to which two or more components or systems can exchange information and use the information that has been exchanged.
Reference: After ISO 25010
See also: functional suitability
learnability Version 2
The degree to which a component or system can be used by specified users to achieve specified goals of learning with satisfaction and freedom
from risk in a specified context of use.
Reference: After ISO 25010
localization Version 1
The process of making a system suitable for a specific user group.
See also: internationalization
maintainability Version 2
The degree to which a component or system can be modified by the intended maintainers.
Reference: After ISO 25010
See also: analyzability, modifiability, testability
maintenance Version 2
The process of modifying a component or system after delivery to correct defects, improve quality characteristics, or adapt to a changed
environment.
Reference: After ISO 24765
malware Version 1
Software that is intended to harm a system or its components.
See also: anti-malware
maturity Version 2
(1) The capability of an organization with respect to the effectiveness and efficiency of its processes and work practices. (2) The degree to which
a component or system meets needs for reliability under normal operation.
Reference: ISO 25010
measurement Version 1
The process of assigning a number or category to an entity to describe an attribute of that entity.
Reference: After ISO 24765
metric Version 1
A measurement scale and the method used for measurement.
ML model Version 1
An implementation of machine learning (ML) that generates a prediction, classification or recommendation based on input data.
moderator Version 4
(1) The person responsible for running review meetings. (2) The person who performs a usability test session.
Synonyms: facilitator
modifiability Version 2
The degree to which a component or system can be modified without degrading its quality.
Reference: After ISO 25010
Synonyms: changeability
See also: maintainability
modularity Version 1
The degree to which a system is composed of discrete components such that a change to one component has minimal impact on other
components.
Reference: After ISO 25010
non-repudiation Version 1
The degree to which actions or events can be proven to have taken place, so that the actions or events cannot be repudiated later.
Reference: After ISO 25010
open–loop-system Version 1
A system in which controlling action or input is independent of the output or changes in output.
Reference: Bakshi
operability Version 2
The degree to which a component or system has attributes that make it easy to operate and control.
Reference: After ISO 25010
passed Version 1
The status of a test result in which the actual result matches the expected result.
path Version 1
A sequence of consecutive edges in a directed graph.
Synonyms: control flow path
pharming Version 1
A security attack intended to redirect a website's traffic to a fraudulent website without the user's knowledge or consent.
phishing Version 1
An attempt to acquire personal or sensitive information by masquerading as a trustworthy entity in an electronic communication.
playtest Version 1
Ad hoc testing of a game by players to identify failures and gather feedback.
portability Version 2
The degree to which a component or system can be transferred from one hardware, software or other operational or usage environment to
another.
Reference: After ISO 25010
See also: adaptability, coexistence, installability, replaceability
postcondition Version 2
The expected state of a test item and its environment at the end of test case execution.
precondition Version 2
The required state of a test item and its environment prior to test case execution.
priority Version 1
The level of (business) importance assigned to an item, e.g., defect.
PRISMA Version 1
A systematic approach to risk-based testing that creates a product risk matrix.
pseudo-oracle Version 1
An independently derived variant of the test item used to generate results, which are compared with the results of the original test item based on
the same test inputs.
Reference: ISO 29119-11
quality Version 3
The degree to which a work product satisfies stated and implied needs of its stakeholders.
Reference: After IREB
ramp-down Version 1
A technique for decreasing the load on a system in a measurable and controlled way.
ramp-up Version 1
A technique for increasing the load on a system in a measurable and controlled way.
reconnaissance Version 1
The exploration of a target area aiming to gain information that can be useful for an attack.
Synonyms: footprinting
recoverability Version 2
The degree to which a component or system can recover the data directly affected by an interruption or a failure and re-establish the desired
state of the component or system.
Reference: After ISO 25010
See also: reliability
replaceability Version 2
The degree to which a component or system can replace another specified component or system for the same purpose in the same environment.
Reference: After ISO 25010
See also: portability
requirement Version 2
A provision that contains criteria to be fulfilled.
Reference: ISO 24765
retrospective Version 2
A regular event in which team members discuss results, review their practices, and identify ways to improve.
Reference: After SAFe
Synonyms: project retrospective, retrospective meeting, post-project meeting
reusability Version 1
The degree to which a work product can be used in more than one system, or in building other work products.
Reference: After ISO 25010
review Version 3
A type of static testing in which a work product or process is evaluated by one or more individuals to detect defects or to provide improvements.
reviewer Version 2
A participant in a review who identifies defects in the work product.
Reference: After ISO 20246
Synonyms: checker, inspector
risk Version 1
A factor that could result in future negative consequences.
See also: product risk, project risk
salting Version 1
A cryptographic technique that adds random data (salt) to the user data prior to hashing.
See also: hashing
scribe Version 2
A person who records information at a review meeting.
Reference: After ISO 24765
Synonyms: recorder
security Version 3
The degree to which a component or system protects its data and resources against unauthorized access or use and secures unobstructed
access and use for its legitimate users.
Reference: After ISO 25010
Synonyms: information security
See also: functional suitability
severity Version 1
The degree of impact that a defect has on the development or operation of a component or system.
short-circuiting Version 1
A programming language/interpreter technique for evaluating compound conditions in which a condition on one side of a logical operator may not
be evaluated if the condition on the other side is sufficient to determine the final outcome.
simulator Version 2
A component or system used during testing which behaves or operates like a given component or system.
Reference: After ISO 24765
See also: emulator
stub Version 1
A skeletal or special-purpose implementation of a software component, used to develop or test a component that calls or is otherwise dependent
on it. It replaces a called component.
Reference: After ISO 24765
test Version 1
A set of one or more test cases.
testability Version 3
The degree to which test conditions can be established for a component or system, and tests can be performed to determine whether those test
conditions have been met.
Reference: After ISO 25010
tester Version 2
A person who performs testing.
testing Version 3
The process within the software development lifecycle that evaluates the quality of a component or system and related work products.
See also: quality control
testware Version 2
Work products produced during the test process for use in planning, designing, executing, evaluating and reporting on testing.
Reference: After ISO 29119-1
tour Version 1
A set of exploratory tests organized around a special focus.
traceability Version 3
The ability to establish explicit relationships between related work products or items within work products.
Reference: IREB
usability Version 3
The degree to which a component or system can be used by specified users to achieve specified goals in a specified context of use.
Reference: After ISO 25010
See also: user interface aesthetics, operability, appropriateness recognizability
validation Version 2
Confirmation by examination that a work product matches a stakeholder's needs.
Reference: After IREB
verification Version 1
Confirmation by examination and through provision of objective evidence that specified requirements have been fulfilled.
Reference: ISO 9000
walkthrough Version 3
A type of review in which an author leads members of the review through a work product and the members ask questions and make comments
about possible issues.
Reference: After ISO 20246
Synonyms: structured walkthrough
See also: peer review