Timed Extended Invariants for the Passive Testing of Web Services

Abstract

The service-oriented approach is becoming more and more popular to integrate highly heterogeneous systems. Web services are the natural evolution of conventional middleware technologies to support Web-based and enterpriselevel integration. Formal testing of such Web-based technology is a key point to guarantee its reliability. In this paper, we choose a non-intrusive approach based on monitoring to propose a conformance passive testing methodology to check that a composed Web service respects its functional requirements. This methodology is based on a set of formal invariants representing properties to be tested including data and time constraints. Passive testing of an industrial system (that uses a composition of Web services)is briefly presented to demonstrate the effectiveness of the proposed approach.

Model based testing of service oriented applications

“…Regression testing is approached considering minimization (Li et al, 2008b) and prioritization (Mei et al, 2009c). Approaches have been proposed to support passive testing (Benharref et al, 2006;Morales et al, 2010;Cavalli et al, 2010). There is also an initial interest in testing dynamic orchestrations (Kattepur et al, 2011;Hummer et al, 2011Hummer et al, , 2013.…”

“…These techniques are: Labeled Transition System (LTS) and extensions (Mei et al, 2009a;Bertolino et al, 2004Bertolino et al, , 2008Frantzen et al, 2008;Bentakouk et al, 2009;Wieczorek et al, 2009Wieczorek et al, , 2010Rabhi, 2012;Escobedo et al, 2010;De Angelis et al, 2010), timed automaton and extensions (Lallali et al, 2008;Morales et al, 2010;Cavalli et al, 2010;Gao and Li, 2011), Stream X-Machine (SXM) (Dranidis et al, 2007;Ramollari et al, 2009;Kourtesis et al, 2010;Dranidis et al, 2010), extensions of FSMs (Benharref et al, 2006;Keum et al, 2006;Dong et al, 2010), finite state automaton (Baldoni et al, 2005), and Web Service Automaton (WSA) (Zheng et al, 2007). The modeling techniques are used to describe the control flow, data flow, timing, and stochastic properties.…”

Passive Testing with Asynchronous Communications

“…In these situations, testing can still play a role, but becomes more passive since interaction will be replaced by observation. Formal passive testing is already a well established line of research and extensions of the original frameworks [21,4,2] have dealt with issues such as security and time [24,22,1]. Essentially, in passive testing we have a property and we check that the trace being observed satisfies that property.…”

A survey on formal active and passive testing with applications to the cloud

“…Property modeling for monitoring have been defined and adapted from currently used formalisms, some of the works using trace analysis techniques: TIC [50] and TIPS [56] are based on the analysis of, respectively the execution traces of a system and the exchanged commu-nication packets. They aim at determining if real traces of the system respect functional and security requirements.…”

“…Different techniques for network monitoring exist in the literature and can be based on, for instance, SNMP [68,85], Deep Packet Inspection (DPI) [19] and invariants [56]. DPI is a technique that is used for completely analyzing communication packets (both headers and payloads) and can be useful for security analysis of network traffic and detecting and preventing intrusions (IDPS, Intrusion Detection and Prevention Systems) [52].…”