The article outlines comprehensive quality assurance approaches for technical improvement projects, highlighting risk-driven processes, automated testing, business perspective integration, and the importance of addressing non‑functional requirements to ensure stable, reliable system upgrades.
This guide explains how to craft a test plan or strategy by weighing implementation, maintenance, and monetary costs against benefits and risks, offering practical questions, coverage considerations, tool choices, and process recommendations to help teams achieve optimal testing outcomes.
The article explains how business capability modeling provides a technology‑agnostic framework that aligns IT strategy with business goals, helps identify redundancies, manage risks, support mergers and innovation, and offers a four‑step method to build effective capability models.
The article outlines Ant Group's multi‑stage journey of building large‑scale distributed system stability, describing architectural evolutions, risk‑inspection mechanisms, high‑availability solutions such as LDC and fine‑grained traffic scheduling, and intelligent risk‑defense products that together enable resilient, cost‑effective operations.
The article explains the origins and four quadrants of technical debt, outlines its detrimental effects on software quality and maintainability, and offers practical approaches—including daily debt management, clear technical standards, continuous technology monitoring, visualization, and sustained investment—to identify, prioritize, and reduce technical debt in development teams.
This document presents Ant Financial's comprehensive coding standards covering concurrency control, idempotency, state management, object handling, SQL practices, time handling, exception safety, code quality, architecture design, middleware usage, data quality, production change procedures, emergency response, and client‑frontend considerations to ensure robust, secure, and maintainable backend systems.
This article examines how startups can harness massive pre‑trained AI models such as GPT‑3, outlining the historical context, benefits of transfer learning, the steep costs and data‑alignment challenges, and strategic considerations when using cloud APIs versus self‑hosting.
The article details China's new AI model risk governance regulations, the CAICT 2021 GOLF+ IT Governance Forum, Tongdun Technology's successful maturity assessment for financial gambling‑fraud risk models, and insights from executives on implementation challenges, benefits, and future plans.
China’s new AI model risk‑governance maturity assessment, unveiled at the 2021 GOLF+ IT New Governance Forum, showcases regulatory‑driven standards, highlights Du Xiaoman Financial’s successful evaluation, and outlines a comprehensive framework that enterprises can adopt to ensure safe, fair, and compliant AI deployments.
The jointly authored whitepaper by China Software Testing Center, National Information Center, and Ant Group introduces a data security composite governance model, detailing strategic, managerial, and technical dimensions, multi‑view security measurement, and practical implementation guidance for enterprises under the new data security law.
This article explains what technical debt is, why it matters, and provides practical guidance on avoiding blame, discussing risks, prioritizing work with techniques like delay cost and ICE/RICE, and implementing concrete strategies to allocate effort and reduce debt in software projects.
The article analyzes common reasons why defects escape testing and appear in production—ranging from missed test cases and environment differences to incomplete releases—and offers a step‑by‑step checklist of practices to improve testing, release processes, and risk mitigation.
This article surveys notorious software bugs—from payroll overpayments and Excel gene‑paper errors to the Ariane 5 launch failure and the 1983 Soviet nuclear alert—showing how coding mistakes can cause massive financial loss, endanger lives, and even threaten global security.
This article shares a senior CTO’s journey through Alibaba and Ant Group, detailing how commercial goals and technology co‑evolve, the pivotal architectural decisions, risk‑management practices, organizational design, and leadership principles that shape effective technology leadership.
This article explores core project‑management concepts—scope, time, cost, quality—and dives deep into the RACI model, the “Main R” role, risk sources, and practical strategies for balancing responsibility, communication, and risk control in software teams.
This article explains how the Business Model Canvas can be adapted into a Project Management Canvas for agile inception, detailing its nine modules, when to create it, how to interpret each module, and step‑by‑step guidance for building and continuously updating the canvas throughout a project's lifecycle.
This article introduces essential project management concepts, including the five process groups, demand review, risk identification, scheduling, and reporting, to help software developers improve coordination, communication, and overall efficiency in their development workflows.
This article presents a comprehensive Digital Transformation Framework (DTF) that defines digital concepts, outlines a reference model for modeling and pricing digital strategies, explains its building blocks, risk and economic evaluation, and demonstrates its integration with enterprise architecture and SAFe for effective business transformation.
The article details Youzan’s Return Shipping Fee insurance service, explaining its consumer and merchant benefits, end‑to‑end workflow, integrated risk‑control mechanisms, insurance‑product specifications, and a layered technical architecture—business, domain, component, and dependency services built with domain‑driven design—to enable scalable, reusable e‑commerce insurance solutions.
This article introduces a practical three‑question thinking framework and five guiding principles that help developers and product teams clarify goals, assess current status, and design effective implementation paths, ultimately improving productivity and reducing wasted effort.
This article explains the importance of software architecture, defines its evaluation process, outlines a step‑by‑step workflow, introduces common evaluation methods such as ATAM, ARID, and ADR, and discusses typical risks and mitigation strategies for successful architectural assessments.
This article shares practical experiences from building a zero‑to‑one information security management system for enterprises, outlining common security challenges, the role of such systems in risk governance, and detailed implementation approaches including security policies, penalty mechanisms, and management operations to achieve closed‑loop risk mitigation.
The article explains how eBay protects its global payment system using a graph‑neural‑network driven risk management framework called xFraud, which combines heterogeneous graph sampling, node‑type encoding, attention mechanisms and dynamic‑graph extensions to detect and explain both individual and organized fraud patterns in real‑time.
BytePush introduces a quality assurance platform that automates risk detection, streamlines QA and R&D collaboration through customizable cards, database ORM improvements, and a three‑stage evolution toward intelligent alerts, saving manpower and improving release quality.
This article outlines practical shell‑script guidelines for automating system and application operations, covering script header conventions, formatting, error handling, safe use of commands, variable handling, file packaging, pipeline restrictions, concurrency locks, logging, and risk‑mitigation strategies to make automation both efficient and secure.
The article explains the importance of conducting full‑link performance testing in production environments, outlines the evolution of testing stages, details key technologies such as traffic shading and data isolation, offers practical process recommendations, and shares real‑world case studies demonstrating cost savings and risk mitigation.
This article introduces the Digital Transformation Framework (DTF), detailing its definition, structure, digital stages, and how it can be used to model, price, and implement digital strategies across enterprises, integrating risk, financial metrics, and architectural considerations.
This case study details the massive traffic and rich interactive challenges faced by Kuaishou's 2021 New Year web event, analyzes resource download, host performance, and CDN dependencies, and presents tiered preloading, offline‑package splitting, dynamic animation degradation, and domain‑sharding solutions to ensure stability.
This article connects classic Chinese idioms to software testing concepts, explaining test purpose, policies, strategies, tool usage, risk management, and improvement practices through vivid examples and practical guidance for building more reliable testing processes.
Cybersecurity’s essence is examined from multiple angles—vulnerabilities, adversarial confrontation, trust assumptions, risk management, human awareness, cost considerations, and governance—highlighting that security is not a single concept but a composite of technical, managerial, and strategic layers embodied in the CIA triad.
This article details the front‑end team's approach to rapidly delivering a government‑backed digital RMB activity, covering project characteristics, pre‑delivery preparations, data flow aggregation, UI decoupling, risk‑control tactics, module loading, deployment layering, and lessons learned for maintaining high availability.
The article outlines how agile development improves software quality, enhances team collaboration, increases project transparency, reduces risk, accelerates growth, and enables more accurate project assessment, making it a comprehensive methodology for modern, user‑centric software projects.
This article reviews nine major data breach incidents—from Clearview AI to Yahoo—detailing their scope, compromised data types, and impact, and emphasizes the importance of robust security practices for developers to prevent such losses.
This guide walks through the full lifecycle of a cross‑team project—defining collaboration, outlining the five‑stage workflow, and detailing practical steps for kickoff, requirement review, task breakdown, technical review, communication, risk control, testing, acceptance, and common pitfalls—to help PMs deliver stable, high‑quality outcomes.
In February 2020, a core operations engineer at Micro-Alliance maliciously deleted the company's production databases, causing over ten billion yuan in market loss, massive user disruption, and a six‑year prison sentence, while highlighting broader industry risks and the need for stronger security controls.
In this reflective article, a former front‑end expert at Alibaba shares half a year of personal growth, detailing how he learned to challenge authority, improve mature technical systems, manage project risks, communicate effectively with product designers, and build professional credibility as a project manager.
This article explains how JD Cloud builds a multi‑layered, end‑to‑end security architecture—including five defense layers, four implementation stages, three guiding principles, and two key focuses—to protect high‑traffic e‑commerce events such as 618 and 11.11 from attacks and ensure stable, safe operations.
A project manager recounts how poor quality focus, insufficient team oversight, lack of design, uncontrolled requirement changes, and missing code reviews led to a disastrous rollout, and shares the corrective actions and key lessons to avoid similar failures in future software projects.
By incrementally routing module‑specific requests through Nginx to a new static front‑end while keeping backward‑compatible APIs, the Vivo Mall team transformed a monolithic 2015 platform into a fully separated architecture, achieving over tenfold front‑end release speed, doubled development efficiency, and a solid foundation for multi‑channel expansion.
This article walks through the complete design of a medical‑aesthetic consumer‑credit platform, covering market analysis, strategic positioning, business object definition, core process modeling, functional architecture, front‑end/back‑end interaction, prototype sketches, and key fintech terminology, offering a practical roadmap from concept to MVP.
This article explains the importance of security testing, outlines where to start, and details a step‑by‑step security testing workflow covering requirement analysis, static code scanning, third‑party component checks, data masking, permission checks, XSS, SQL injection, privilege escalation, file upload/download, server port scanning, and business‑specific test cases.
The article analyzes the 2012 Knight Capital Group disaster, showing how a manual deployment error, lingering legacy code, missing kill‑switch, and inadequate monitoring caused a $4.6 billion loss within 45 minutes, and extracts key DevOps best‑practice lessons to prevent similar failures.
Drawing from years of project experience, the author outlines ten common factors—ranging from unattainable goals to inexperienced managers—that consistently lead to project failure, and suggests that even a single misstep can doom a project.
This article expands on risk management by detailing practical methods for risk identification—such as silent brainstorming and risk breakdown structures—and presenting a combined "1‑2" approach, while also outlining sustainable risk monitoring mechanisms like daily briefs and a case‑library for agile teams.
The article explains Meituan's MySQL inspection framework, covering its design principles, three‑layer architecture, inspection items, automation workflow, and operational results that reduced hidden risks and improved database stability.
The article outlines the importance of defining security requirements within business context, presents the Security Requirements Vision (SRV) components, describes strategic security architecture principles, differentiates security governance, management and operations, and details formalizing security processes with ownership, documentation, integration, roles, and automation opportunities.
Xianyu mitigated lottery‑related financial loss by centralizing rights management, decoupling UI from business logic, and providing a unified SDK with simple draw APIs, while adding real‑time log backflow, comprehensive accounting and monitoring, cutting configuration time by over 50 % and eliminating UI‑only risk.
Facing unprecedented traffic during the 2020 618 shopping festival, JD Health’s product R&D team implemented comprehensive rehearsals, stress testing, architecture reviews, dual‑channel risk controls, and 24‑hour monitoring to ensure system stability and rapid response for its health‑care e‑commerce platforms.
This guide explains why companies outsource software testing, outlines key factors such as outsourcing models, geographic location, service agreements, flexibility, and quality improvement, and provides a step‑by‑step process for investigating, interacting with, and selecting the right testing service provider.
This article examines Meituan's custom rule engine Zeus, detailing the security challenges of a massive multi‑service platform, the architectural decisions made to decouple risk logic, the implementation of reusable factors and rule groups, and the ongoing push toward automated, intelligent risk mitigation.
This article explains core project‑management concepts—team collaboration, clear boundaries, effective communication, and risk handling—using football analogies to illustrate how project managers can lead multi‑disciplinary teams toward successful outcomes.
The article examines how project management and agile methodologies were applied to China’s nationwide COVID‑19 response, illustrating initiation, planning, execution, risk and stakeholder management, iterative delivery, transparency, and continuous improvement through concrete examples and a structured framework.
This article explains the anti‑fragility concept, illustrates how cloud‑based systems become increasingly vulnerable to unexpected events, and offers practical strategies—including risk reduction, choice diversification, proactive experimentation, and biologically inspired resilience—to transform operations and turn shocks into opportunities.
This article shares practical project‑management secrets from Alibaba Entertainment's PMO, outlining how to structure, coordinate, and execute massive online campaigns remotely by focusing on clear goals, right people, solid plans, effective mechanisms, and thorough retrospectives.
Yazan’s SaaS platform maintains 99.99% uptime through robust IaaS infrastructure, dedicated DBA and network teams, while defending against DDoS attacks and data breaches with ISO‑27001 and CSA C*STAR‑aligned security controls, employing multi‑cloud real‑time and cold backups and offering compensation for outage‑related business impacts.
After the Chinese New Year, Ant Financial’s senior product expert Zhang Wen shares a detailed account of his daily remote‑working routine, the communication and planning challenges posed by the pandemic, and the tools and processes his team adopted to maintain product delivery and collaboration.
The 2018 TSB bank migration disaster, which corrupted data for 13 million customers and cost billions, illustrates how inadequate testing, overly complex system integration, and poor change‑management practices can cripple banking IT operations and highlight the need for rigorous operational risk controls.
The Beijing High People’s Court’s landmark 2019 ruling in Digital Heaven v. Yuzu, China’s first GPL‑related lawsuit, rejected Yuzu’s claim that three HBuilder plugins were GPL‑bound derivatives, ordered RMB 710,000 damages, and highlighted both growing judicial recognition of the GPL and the need for companies to isolate, analyze, and manage open‑source components to avoid copyleft liability.
This article explains the concept of risk, outlines the five key elements of risk management, provides practical templates and examples for identifying and responding to common project risks, and shares a case study with actionable lessons for improving risk handling in agile development teams.
The article reports on Beike Zhaofang's knowledge‑graph technology conference, detailing how relationship graphs are applied to risk control, the four‑layer graph architecture, the use of Spark GraphX, JanusGraph and DGraph, and broader industry‑graph applications in real‑estate AI solutions.
The article details the design, multi‑stage evolution, and operational impact of a big‑data‑based security portrait platform built by 58.com, describing its data pipelines, real‑time risk tagging, strategy scheduling, configuration management, and overall architecture that enable large‑scale threat detection and mitigation.
This article outlines how to transform manual and scripted operations into automated and intelligent processes by applying comprehensive shell scripting standards, avoiding common pitfalls, and implementing risk‑mitigation techniques such as proper headers, quoting, logging, concurrency locks, and safe file handling.
China’s mandatory Cybersecurity Graded Protection System 2.0, effective Dec 1 2019, classifies information systems into five security levels, imposes legally enforceable technical and management controls—including encryption, trusted computing, and cloud requirements—and outlines a five‑step assessment, registration, remediation, and supervision process for enterprises to achieve compliance quickly.
This comprehensive guide explains how technical professionals can excel as project managers in internet companies by defining clear goals, aligning people and processes, and navigating each phase—from project initiation and requirement review to scheduling, testing, release, and post‑mortem—ensuring timely, high‑quality delivery.
The article examines the challenges of adopting microservice architecture, especially when refactoring monolithic applications, by discussing design rationale, risk assessment, mitigation plans, and how to manage conflicts between speed and quality to achieve a "good enough" solution.
This article analyzes how Didi’s unique ride‑hailing scenario big data is applied to automotive finance, detailing the business model, asset‑side and full‑process risk challenges, data‑driven solutions, and future prospects for intelligent credit risk control in both enterprise and retail lending.
This article explains the need for DevOps, contrasts it with ITIL, outlines practical steps for implementation, and shares Vipshop’s component‑centric DevOps practice, including configuration platforms, risk‑matrix control, and continuous improvement metrics, offering engineers actionable insights for real‑world deployment.
This article details the evolution, architectural redesign, and performance optimizations of MaFengWo's membership system, covering identity strategy transformation, four‑layer service architecture, rights pool construction, third‑party integration, points integration, concurrency control, traffic shaping, and risk management to support scalable, high‑quality user experiences.
This guide outlines how engineers can succeed as technical project managers by setting clear goals, aligning people and processes, and mastering each phase of the project lifecycle—from initiation and requirement review to scheduling, design, testing, release, and retrospective analysis—while mitigating common risks.
This article dispels five widespread AI misconceptions—from believing AI works like the human brain to thinking it is bias‑free—while offering practical guidance on recognizing AI limits, improving data quality, managing risks, and applying AI responsibly across industries.
The article debunks the myth that agile eliminates planning by showing that even in complex, time‑boxed Scrum projects a flexible, continuously‑refined plan covering scope, cost, schedule, and quality is essential for managing risk and delivering business value.
This article presents a comprehensive overview of financial risk management, detailing business challenges such as identity verification and fraud, and describing technical solutions including feature engineering, sample handling, model optimization, and online validation, emphasizing the integration of data-driven AI techniques throughout the process.
The closure of Guizhou’s Huaxintong highlights the high risk of semiconductor ventures, the need for companies and governments to admit failure, and why courage to cut losses and tolerate setbacks is essential for a sustainable chip industry in China.
The article explains how thorough requirement analysis, disciplined daily planning, proactive risk communication, and a strong team project culture enable testers to actively contribute to project success, improve delivery quality, and align product outcomes with business value in fast‑changing mobile‑internet environments.
This article explains the origin of Java thread pools, outlines their advantages and potential risks such as deadlocks and resource exhaustion, describes their internal states and processing flow, provides guidance on sizing for CPU‑ or I/O‑bound tasks, and reviews the four common thread‑pool implementations.
This comprehensive guide outlines 40 essential project management terms—from basic concepts like project plans and WBS to advanced topics such as risk mitigation, Kanban flow limits, and quality assurance—helping professionals enhance their terminology and improve project communication.
The article outlines Ant Financial's technical risk prevention platform, describing the challenges of financial‑grade distributed architectures, the multi‑layer risk assurance system, the TRaaS platform's risk baseline, handling, and change‑control mechanisms, and how these practices empower partners to achieve high‑availability and secure financial services.
This article explains how to build a credit scoring card model using logistic regression, detailing the full development workflow—from variable selection and WOE encoding to model training, evaluation metrics like AUC and KS, and deployment considerations for risk management.
Ant Group’s Alipay presented its AI‑driven risk control capabilities and led the development of an ITU‑SG17 international security standard for enhanced identity authentication, highlighting its low loss rate and reinforcing its global fintech reputation.
Ant Financial’s internal red‑blue technical attack‑defense program, driven by a dedicated blue team and SRE‑based red team, continuously probes system weaknesses, refines fault‑injection tools like Awatch, and evolves high‑availability and self‑healing mechanisms to strengthen risk control and operational reliability.
This article shares practical insights on project management, covering how to understand project goals, assess resources, communicate with stakeholders, handle risks and changes, create effective plans, and ensure successful delivery through disciplined documentation and verification.
Project managers often face shifting requirements, poorly organized meetings, delayed progress, and post‑launch knowledge gaps, but by clearly defining scope, using focused agendas, daily stand‑ups, critical‑path monitoring, and documenting assets for hand‑off, teams can apply agile‑inspired practices to deliver value faster.
This article outlines Ant Financial’s engineering practices for achieving fast yet stable continuous delivery of financial‑grade internet products, covering industry challenges, agile delivery methods, risk‑controlled innovation, and the AntLinkE platform that integrates DevOps, data analytics, and service support.
The article explains how Objective‑C Categories can implement a low‑overhead, type‑safe communication layer between iOS components, compares alternative patterns like DI, SPI and NotificationCenter, presents performance data, and proposes two Category‑based schemes with tooling to detect method‑name conflicts and ensure maintainable modular architecture.
This article explains the rapid rise of open‑source technologies, outlines common questions and risks associated with open‑source license usage, summarizes a guide covering eleven major licenses, and announces the OSCAR Open Source Pioneer Day where experts will discuss compliance and best practices.
This article offers eight practical operations‑team strategies—inspection, monitoring alerts, capacity planning, network restrictions, risk pre‑plans, data backup, on‑call mechanisms, and staying connected—to ensure system stability and enjoy the Golden Week holiday without incidents.
The article explores how big data and artificial intelligence are reshaping finance through automated risk management, advanced customer data handling, personalized services, predictive analytics, and real‑time analysis, highlighting practical methods, benefits, and future trends for financial institutions.
The article analyses the shortcomings of traditional seller‑driven financial risk data queries and proposes a blockchain consortium that uses distributed ledger, consensus, smart contracts and token‑based pricing to enable fair, secure, and efficient data sharing and settlement among financial institutions.
This article explains what user profiling is, why it matters for large‑scale enterprises, and how to design a data‑driven profiling system—including data sources, business modeling, tag taxonomy, and practical applications such as targeted marketing, risk assessment, user research, personalized services, and strategic decision‑making.
In this interview, senior JD.com project manager Tian Yanyun discusses his most memorable projects, coordination techniques without formal authority, demand decomposition, feasibility assessment, risk control, portfolio benefits, and how to thrive in a volatile, uncertain, complex, and ambiguous environment.
This article examines how big data technologies are reshaping banking, insurance, and securities by enabling customer profiling, precision marketing, risk management, and operational optimization, while also outlining the key challenges such as data quality, integration complexity, standards, and governance that the sector must overcome.
The article explains the three‑entity (customer, user, account) account model, its architectural layout, and how it supports diverse fintech scenarios such as marketing, risk control, intra‑ and inter‑business line operations, and external service provisioning.
This article chronicles the three‑generation evolution of Zhihu’s anti‑cheat platform Wukong, detailing its business context, spam taxonomy, multi‑layered control methods, architectural redesigns, strategy language improvements, graph‑based risk analysis, and the continuous integration of big‑data and machine‑learning techniques to combat content and behavior spam.
This article explores the core competencies that distinguish a truly professional project manager, emphasizing the importance of goal‑oriented thinking, effective communication, risk identification, and strong negotiation skills while highlighting common pitfalls and the need for clear appointment and exit criteria.
This article explains why architects need both specialized and general management skills and summarizes the ten PMP knowledge areas—Integration, Scope, Schedule, Cost, Quality, Resource, Communication, Risk, Procurement, and Stakeholder—providing visual references for each.
This article outlines the comprehensive responsibilities of a software testing engineer, covering requirement review, documentation, system architecture awareness, process management, risk and time management, and provides practical guidelines to improve software quality and delivery speed.
The article details Ctrip's mature real‑time anti‑fraud platform, describing its big‑data parallel processing, AI‑driven models, device‑fingerprinting, CDNA service, and evolving architecture that together achieve sub‑150 ms decision latency while handling billions of daily transactions.
This article analyses fifteen typical architectural design risks—such as duplicate interactions, high‑frequency calls, redundant requests, non‑reentrant interfaces, unreasonable timeouts, retry misconfigurations, IP direct‑connect, cross‑datacenter calls, weak/strong dependencies, third‑party reliance, cache penetration, cache avalanche, and coupling issues—explaining their definitions, impacts, detection methods, and concrete mitigation measures with real‑world Baidu cases to help engineers improve system stability.
This article presents an Active PU Learning framework that combines active learning with two‑step positive‑unlabeled learning to improve cash‑out fraud detection in Alipay’s fifth‑generation risk engine, AlphaRisk, achieving three‑fold identification gains over unsupervised methods while reducing labeling costs.
The article shares practical reflections on project management in e‑commerce development, emphasizing the importance of clear requirements, effective communication, realistic scheduling, resource allocation, and proactive risk management to help practitioners improve their project outcomes.
