Testing web services

Siblini, Reda; Mansour, Nashat

doi:10.1109/aiccsa.2005.1387124

Cited by 46 publications

(16 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…One of the first examples of robustness testing applied to Web services is [26]. This paper proposes a technique to test Web services using parameter mutation analysis.…”

Section: Background and Related Workmentioning

confidence: 99%

A robustness testing approach for SOAP Web services

Laranjeiro

Vieira

Madeira

2012

J Internet Serv Appl

View full text Add to dashboard Cite

The use of Web services in enterprise applications is quickly increasing. In a Web services environment, providers supply a set of services for consumers. However, although Web services are being used in business-critical environments, there are no practical means to test or compare their robustness to invalid and malicious inputs. In fact, client applications are typically developed with the assumption that the services being used are robust, which is not always the case. Robustness failures in such environments are particularly dangerous, as they may originate vulnerabilities that can be maliciously exploited, with severe consequences for the systems under attack. This paper addresses the problem of robustness testing in Web services environments. The proposed approach is based on a set of robustness tests (including both malicious and non-malicious invalid call parameters) that is used to discover programming and design errors. This approach, useful for both service providers and consumers, is demonstrated by two sets of experiments, showing, respectively, the use of Web services Robustness testing from the consumer and the provider points of view. The experiments comprise the robustness testing of 1,204 Web service operations publicly available in the Internet and of 29 home-implemented services, including two different implementations of the Web services specified by the standard TPC-App performance benchmark. Results show that many Web services are deployed with critical robustness N. Laranjeiro · M. Vieira (B) · H. Madeira DEI/CISUC, University of Coimbra, 3030-290 Coimbra, Portugal e-mail: mvieira@dei.uc.pt N. Laranjeiro e-mail: cnl@dei.uc.pt H. Madeira e-mail: henrique@dei.uc.pt problems and that robustness testing is an effective approach to improve services quality.

show abstract

“…One of the first examples of robustness testing applied to Web services is [26]. This paper proposes a technique to test Web services using parameter mutation analysis.…”

Section: Background and Related Workmentioning

confidence: 99%

A robustness testing approach for SOAP Web services

Laranjeiro

Vieira

Madeira

2012

J Internet Serv Appl

View full text Add to dashboard Cite

show abstract

“…In particular, the authors start from the WSDL schema types, and generate a WSDL request with random data and a test script, that allows user to manipulate the parameters of a Web service request. (Siblini and Mansour 2005) proposes a technique for testing Web services using mutation analysis: the authors define and apply mutation operators to the WSDL document, in order to generate mutated Web service interfaces that will be used for Web service testing. The WSDL Test tool (Sneed and Huang 2006) generates Web service requests from the WSDL document, and tunes them in accordance with pre-conditions specified by the tester.…”

Section: Related Workmentioning

confidence: 99%

Quality analysis of composed services through fault injection

2008

View full text Add to dashboard Cite

Web service composition can be adopted to\ud develop information systems through integration of services\ud to obtain complex composed services. While interfaces of\ud services are known at composition time, the quality of a\ud composed service may depend on the ability of its\ud component services to react to unforeseen situations, such\ud as data quality problems and service coordination problems.\ud In this work, we propose an approach to analyze the quality\ud of composed services using fault injection techniques, by\ud inspecting the reaction of a composed process to injected\ud faults; the aim is to assess the process quality in terms of\ud fault monitoring and, more generally, fault tolerance\ud capabilities. The component services are analyzed either\ud as black-boxes, when only input and output messages are\ud considered or as white-boxes, when data sources used by\ud services are considered. A test bed is illustrated on a\ud selected example, and results of extensive testing are\ud discussed and framed into a process analysis methodology

show abstract

“…Their purpose is to show that a service or a service composition conforms to a user-provided specification, or to evaluate the V&V methodologies according to their fault detection ability, or to assess some specific temporal properties. Recent proposals in this direction are [17,16,5] which are mainly focused on the conformance of a single service, and [19,11,7] which are specific to service composition and usually rely on the BPEL [14].…”

Section: Related Workmentioning

confidence: 99%

Introducing service-oriented coverage testing

Bartolini

Bertolino

Marchetti

2008

2008 23rd IEEE/ACM International Conference on Automated Software Engineering - Workshops

View full text Add to dashboard Cite

Testing of service-oriented systems is challenged by loose coupling and high dynamism, which are the founding characteristics of this emerging paradigm. Traditional test approaches needs to be revised for such systems, and in particular white-box techniques cannot be applied because services only grant black-box access. We introduce here a novel methodology, called SOCT (service-oriented coverage testing), that adapts the notion of coverage testing to the service-oriented domain, by exploiting the very features of service technology. In SOCT, both the probes inserted into the instrumented service code, and the retrieval of coveragerelated information are themselves implemented as pure service invocations. A TCov service is published that makes available these coverage-related services through a WSDL interface. This simple idea elegantly enables the usage of practical test adequacy criteria also to service-oriented applications. In this paper a realization of SOCT is exemplified for coverage testing of BPEL orchestrations, and is illustrated on the case study of the Virtual Scientific Bookstore.

show abstract

Testing web services

Cited by 46 publications

References 8 publications

A robustness testing approach for SOAP Web services

A robustness testing approach for SOAP Web services

Quality analysis of composed services through fault injection

Introducing service-oriented coverage testing

Contact Info

Product

Resources

About