Anbosoft for IoT
Empowers a real estate investment and management firm to enhance the efficiency of IoT-based systems

A leading real estate firm engaged Anbosoft for expert QA assistance to develop testing frameworks from scratch and elevate the performance of their IoT-based solutions.
1
Cybersecurity testing
2
Functional testing
3
Performance testing
4
Real estate
5
Test automation
Overview
The client, a private US-based enterprise, owns and operates a portfolio of commercial real estate properties situated in central New York City.
​
Lacking any established QA processes, they selected Anbosoft to develop and implement QA strategies from the ground up, aiming to improve the quality of their IoT-based solutions. These solutions are intended to simplify internal navigation and provide multi-tiered access control within their buildings.
Provided Services
Anbosoft was tasked with enhancing the quality of a comprehensive mobile application for iOS and Android, along with an administrative web portal. These technological solutions enable end-users to oversee staff and client permissions throughout various facilities (e.g., elevators, entry points, conference rooms), find their way with interactive maps, and keep abreast of forthcoming events and announcements. The system's backend offers support to businesses leasing office spaces from the client, facilitating employee management with tiered system access rights.
To gain entry into the facilities, staff members can utilize an IoT-based system that connects personal IDs to their profiles either through the mobile app or a QR code.
1. Quality Assurance Strategy
The dedicated QA unit at Anbosoft initiated the project by developing and implementing Scrum-based QA protocols from the ground up.
Anbosoft managed the project workload effectively and addressed issues promptly by keeping open lines of communication with both the client and the development team. By adopting standard Scrum practices, such as bug triage sessions and retrospective meetings, they were able to prioritize tasks efficiently and plan with greater accuracy.
Additionally, they introduced a reporting system to enhance the transparency of the processes, thereby providing the client with real-time access to project updates and the ability to quickly identify any potential issues.
2. Inspection of the Test Subject Systems
Anbosoft developed a robust application designed to manage the processes involved in building entry, such as setting access permissions and overseeing the approval of all arriving guests by the security team.
To refine the integration between the building’s server and the application, Anbosoft utilized a specialized lab for simulating entry scenarios using employee key cards on different floors and handling both employee and guest QR codes.
For key card testing, Anbosoft ensured that the data capture and display across security systems were accurate, thereby facilitating appropriate access levels.
Regarding QR codes, the process included automatic generation of QR codes that replicated those typically issued to guests via email or stored in their profiles when they register in the app. Anbosoft then deployed configured QR code readers to ensure precise scanning accuracy.
3. Enhancing Software Quality
Test Automation
Anbosoft implemented test automation best practices to expedite testing processes and extend coverage of smoke testing.
Automated tests simulated real-user interactions, processing guest invitations through the SDK of third-party systems, and managing access approvals or denials to the building or specific areas while affirmatively displaying the corresponding actions in the mobile app.
The QA team further validated the QR codes through automated tests and set up an AWS device farm to access real mobile devices for mobile application testing, avoiding the need for separate infrastructure development.
The early adoption of test automation significantly cut down the QA timeframe, allowing the client to concentrate more on primary business goals.
​
4. Non-functional testing performed
Cybersecurity Testing
Initial evaluations noted the software’s high susceptibility to cyberattacks.
Anbosoft conducted a comprehensive security vulnerability assessment following the OWASP guides for web and mobile security. Web application checks covered configurations, authentications, sessions, various injections, business logic, and file downloads, including malicious types.
For mobile applications, the team scrutinized configuration quality, assessed potential traffic interception risks, or unsafe software downloads, deconstructed apps to review source codes, and analyzed encryption methods to detect visible sensitive data.
5. Server-side and client -side evaluation
​Stress testing to identify the system’s maximum capacity and its dependency on user numbers, requests, and transactions.
Load testing to verify system endurance under anticipated loads over extended periods.
The outcomes revealed critical issues such as prolonged authorization times and multiple HTTP response errors, prompting Anbosoft to advise restructuring heavy API requests and optimizing main page elements.
Client-side assessments focused on frontend performance, identifying potential user experience issues, and pinpointing frontend components for optimization.
Identified critical system vulnerabilities included:
-
Default admin panel passwords.
-
Unencrypted data transmissions.
-
Exposure of sensitive login information in logs or local files.
-
Authorization errors.
-
Following the tests, Anbosoft provided a detailed report on the security levels using the CVSS calculator, ranking the web app security as low and the mobile systems as medium.
For each vulnerability, recommendations were offered to heighten the security standards of the system.
The client expressed high satisfaction with the results, appreciating Anbosoft’s dedication to delivering excellent software performance and ensuring robust security.
Technologies & Tools
-
JIRA
-
Zephyr
-
Swagger
-
Zeplin ​​
-
Fiddler
-
Grafana
-
Apache JMeter
-
Jenkins
-
iTools
-
Android
-
SDK Tools
-
Java
Results
-
Anbosoft enabled the client in Europe to maintain seamless functionality of their IoT-based applications by establishing a robust delivery methodology and implementing a transparent testing environment through the development of Scrum-based QA processes from the ground up.
-
We minimized the duration required for QA tasks by integrating test automation early in the software development life cycle.
-
Enhanced the overall security posture by performing vulnerability assessments to detect and address critical system vulnerabilities.
-
Contributed to the enhancement of the IT solution's efficiency through comprehensive server- and client-side evaluations.
