Improving data perturbation testing techniques for Web services

Melo, Ana Duarte; Silveira, Paulo Sérgio Panse

doi:10.1016/j.ins.2010.09.030

Cited by 14 publications

(9 citation statements)

References 22 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Currently, research on Web service vulnerability testing remains limited, with studies focusing mainly on functionality testing [2,5,6] , reliability analysis [3] , data perturbation [7][8][9] , and Web service rule mutation [10][11][12] . Takase and Tajima [2] proposed an approach to the functional testing of Web services by first extracting the SOAP message using the WSDL converter and then exchanging messages using the SOAP message binding framework.…”

Section: Related Workmentioning

confidence: 99%

“…However, only a few special values (such as maximum and minimum and valid decimal) were considered in the mutation process. Their data value and communication perturbation approach [10] was modified by Melo and Silveira [11] , who also extended the mutations [12] introduced previously [1,7] by using an invalid test case value in the data value perturbation and by introducing two strategies (al l and choi ce) and four mutation operators for RPC communication in the data communication perturbation. The test coverage for the RPC and document communication was also increased, but the overall mutation testing approach was not completely comprehensive, nor was a test case generation algorithm proposed.…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

Worst-input mutation approach to web services vulnerability testing based on SOAP messages

Chen

Wang

Towey

et al. 2014

Tinshhua Sci. Technol.

View full text Add to dashboard Cite

The growing popularity and application of Web services have led to increased attention regarding the vulnerability of software based on these services. Vulnerability testing examines the trustworthiness and reduces the security risks of software systems. This paper proposes a worst-input mutation approach for testing Web service vulnerability based on Simple Object Access Protocol (SOAP) messages. Based on characteristics of SOAP messages, the proposed approach uses the farthest neighbor concept to guide generation of the test suite.The corresponding automatic test case generation algorithm, namely, the Test Case generation based on the Farthest Neighbor (TCFN), is also presented. The method involves partitioning the input domain into sub-domains according to the number and type of SOAP message parameters in the TCFN, selecting the candidate test case whose distance is the farthest from all executed test cases, and applying it to test the Web service. We also implement and describe a prototype Web service vulnerability testing tool. The tool was applied to the testing of Web services on the Internet. The experimental results show that the proposed approach can find more vulnerability faults than other related approaches.

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

Worst-input mutation approach to web services vulnerability testing based on SOAP messages

Chen

Wang

Towey

et al. 2014

Tinshhua Sci. Technol.

View full text Add to dashboard Cite

show abstract

“…The study [40] is proposed an approach to combine the accessibility technologies in graphical applications (GAPs) for a visualization mechanism enables nonprogrammers to generate unit test cases in web services by drag-and-drop operations on graphical user interface (GUI). In the reference [41] is testing techniques to generate a set of test cases for web services automatically. The techniques presented here explore data perturbation of web services messages upon data types, integrity and consistency.…”

Section: Related Workmentioning

confidence: 99%

Automatic Test Case Generation for Orchestration Languages at Service Oriented Architecture

Shamsoddin-motlagh¹

2013

IJCA

View full text Add to dashboard Cite

Service oriented architecture (SOA) is one of the latest software architectures. This architecture is created in direction of the business requirements and for removing the gap between softwares and businesses. The software testing is rising cost of activities in development software. SOA has different specifications and features proportion of the other software architectures. According to these features of the system, we cannot apply all approaches and methodologies of testing in the typical software systems for testing in the SOA systems, and there are need to specific procedures for testing the service oriented systems and/or change in the testing approaches.This document presents an approach for test cases generation automatically at the SOA system. First, this approach creates a control flow graph of BPEL file in the system and services related of the main service, WSIG file is used to create subgraphs of the related services. Then, the test cases create randomly of the primary test for graph in the generated system. Final, it tries to create test cases require to cover of the system graph through randomly generation and the genetic algorithms. This algorithm will compare with standard genetic algorithm and we will show the algorithm has performance better than the other algorithm.

show abstract

“…The study [46] is proposed an approach to combine the accessibility technologies in graphical applications (GAPs) for a visualization mechanism enables nonprogrammers to generate unit test cases in web services by drag-and-drop operations on graphical user interface (GUI). In the reference [47] is testing techniques to generate a set of test cases for web services automatically. The techniques presented here explore data perturbation of Web services messages upon data types, integrity and consistency.…”

Section: Automatic Testing Toolsmentioning

confidence: 99%

“…In A service may be provided in the composition of services using BPEL file, the reason test on the some parts of this table is on the integration testing (the BPEL file) also put on the unit testing capabilities. [11,14], DbC [13,16], WS-TAXI [15], GAP [46], GenAutoWS [47], […”

Section: Summarizedmentioning

confidence: 99%

A Survey of Service Oriented Architecture Systems Testing

Shamsoddin-motlagh¹

2012

IJSEA

View full text Add to dashboard Cite

Service oriented architecture (SOA) is one of the latest software architectures. This architecture is created in direction of the business requirements and removed the gap between softwares and businesses. The software testing is the rising cost of activities in development software. SOA has different specifications and features proportion of the other software architectures. First this paper reviews SOA testing challenges and existing solution(s) for those challenges. Then that reports a survey of recent research to SOA systems testing, that covers both functional and non-functional testing. Those are presented for different levels of functional testing, including unit, integration, and regression testing.

show abstract

Improving data perturbation testing techniques for Web services

Cited by 14 publications

References 22 publications

Worst-input mutation approach to web services vulnerability testing based on SOAP messages

Worst-input mutation approach to web services vulnerability testing based on SOAP messages

Automatic Test Case Generation for Orchestration Languages at Service Oriented Architecture

A Survey of Service Oriented Architecture Systems Testing

Contact Info

Product

Resources

About