In web services testing, accessing the interactive contents of measured Services and the information of service condition accurately are the key issues of system design and realization. A non-intrusive solution based ...In web services testing, accessing the interactive contents of measured Services and the information of service condition accurately are the key issues of system design and realization. A non-intrusive solution based on axis2 is presented to overcome the difficulty of the information retrieval in web service testing. It can be plugged in server side or client side freely to test pre-deployed or deployed web services. Moreover, it provides a monitoring interface and the corresponding subscription publication mechanism for users based on web services to support the quality assurance grounded on service-oriented architecture （SOA） application service.展开更多
Crowdtesting has emerged as an attractive and economical testing paradigm that features testers from different countries,with various backgrounds and working conditions.Recent developments in crowdsourcing testing sug...Crowdtesting has emerged as an attractive and economical testing paradigm that features testers from different countries,with various backgrounds and working conditions.Recent developments in crowdsourcing testing suggest that it is feasible to manage test populations and processes,but they are often outside the scope of standard testing theory.This paper explores how to allocate service-testing tasks to proper testers in an ever-changing crowdsourcing environment.We formalize it as an optimization problem with the objective to ensure the testing quality of the crowds,while considering influencing factors such as knowledge capability,the rewards,the network connections,and the geography and the skills required.To solve the proposed problem,we design a task assignment algorithm based on the Differential Evolution(DE)algorithm.Extensive experiments are conducted to evaluate the efficiency and effectiveness of the proposed algorithm in real and synthetic data,and the results show better performance compared with other heuristic-based algorithms.展开更多
Model checking techniques have been widely used in verifying web service compositions to ensure the trustworthi- ness. However, little research has focused on testing web services. Based on the research of model check...Model checking techniques have been widely used in verifying web service compositions to ensure the trustworthi- ness. However, little research has focused on testing web services. Based on the research of model checking techniques~ we propose a model checking based approach for testing web service composition which is described by using the web services choreography description language （WS-CDL）. According to worldwide web consortium （W3C） candidate recommendation, the WS-CDL specification provides a language for characterizing interactions between distinct web services using XML. Since the behaviors of web service composition are asynchronous, distributed, low-coupled and platform independent, we employ the guarded automata （GA） model for specifying the composition described in WS-CDL and using the simple promela interpreter （SPIN） model checker for detecting the collaborations of web services. Test cases can be transformed from counterexamples generated by SPIN using adequacy criteria. In this paper we apply the transition coverage criterion for generating counterex- amples. To illustrate our approach, we set ＂E-commerce service system＂ as an example for demonstrating how test cases can be generated using SPIN for compositions specified in WS-CDL.展开更多
Web Service测试成为当前软件测试的研究热点,TTCN-3是ETSI专门为测试领域制定的通用测试语言,在很多领域以及不同的软件开发阶段都有运用。使用Axis2将WSDL文件中的内容映射到Java类中,再将Java类代表的数据结构和操作按照相应规则映射...Web Service测试成为当前软件测试的研究热点,TTCN-3是ETSI专门为测试领域制定的通用测试语言,在很多领域以及不同的软件开发阶段都有运用。使用Axis2将WSDL文件中的内容映射到Java类中,再将Java类代表的数据结构和操作按照相应规则映射到TTCN-3中,映射得到结构清晰合理的数据类型,即可有效地对Web Service进行测试,并只需进行少量更改即可应用到对其他Web Service的测试中,大大减轻测试人员的工作量,提高测试效率。展开更多
The growing popularity and application of Web services have led to increased attention regarding the vulnerability of software based on these services. Vulnerability testing examines the trustworthiness and reduces th...The growing popularity and application of Web services have led to increased attention regarding the vulnerability of software based on these services. Vulnerability testing examines the trustworthiness and reduces the security risks of software systems. This paper proposes a worst-input mutation approach for testing Web service vulnerability based on Simple Object Access Protocol （SOAP） messages. Based on characteristics of SOAP messages, the proposed approach uses the farthest neighbor concept to guide generation of the test suite. The corresponding automatic test case generation algorithm, namely, the Test Case generation based on the Farthest Neighbor （TCFN）, is also presented. The method involves partitioning the input domain into sub-domains according to the number and type of SOAP message parameters in the TCFN, selecting the candidate test case whose distance is the farthest from all executed test cases, and applying it to test the Web service. We also implement and describe a prototype Web service vulnerability testing tool. The tool was applied to the testing of Web services on the Internet. The experimental results show that the proposed approach can find more vulnerability faults than other related approaches.展开更多
基金supported by the National Natural Science Foundation of China under Grant No 60603035
文摘In web services testing, accessing the interactive contents of measured Services and the information of service condition accurately are the key issues of system design and realization. A non-intrusive solution based on axis2 is presented to overcome the difficulty of the information retrieval in web service testing. It can be plugged in server side or client side freely to test pre-deployed or deployed web services. Moreover, it provides a monitoring interface and the corresponding subscription publication mechanism for users based on web services to support the quality assurance grounded on service-oriented architecture （SOA） application service.
基金supported by the National Natural Science Foundation of China under Grant Nos.61672122,61902050,61602077the Fundamental Research Funds for the Central Universities of China under Grant No.3132019355the CERNET Innovation Project under Grant No.NGII20190627.
文摘Crowdtesting has emerged as an attractive and economical testing paradigm that features testers from different countries,with various backgrounds and working conditions.Recent developments in crowdsourcing testing suggest that it is feasible to manage test populations and processes,but they are often outside the scope of standard testing theory.This paper explores how to allocate service-testing tasks to proper testers in an ever-changing crowdsourcing environment.We formalize it as an optimization problem with the objective to ensure the testing quality of the crowds,while considering influencing factors such as knowledge capability,the rewards,the network connections,and the geography and the skills required.To solve the proposed problem,we design a task assignment algorithm based on the Differential Evolution(DE)algorithm.Extensive experiments are conducted to evaluate the efficiency and effectiveness of the proposed algorithm in real and synthetic data,and the results show better performance compared with other heuristic-based algorithms.
基金Project supported by the Open Foundation of State Key Laboratory of Software Engineering(Grant No.SKLSE20080712)the National Natural Science Foundation of China(Grant No.60970007)+2 种基金the National Basic Research Program of China(Grant No.2007CB310800)the Shanghai Leading Academic Discipline Project(Grant No.J50103)the Science and Technology Commission of Shanghai Municipality(Grant No.09DZ2272600)
文摘Model checking techniques have been widely used in verifying web service compositions to ensure the trustworthi- ness. However, little research has focused on testing web services. Based on the research of model checking techniques~ we propose a model checking based approach for testing web service composition which is described by using the web services choreography description language （WS-CDL）. According to worldwide web consortium （W3C） candidate recommendation, the WS-CDL specification provides a language for characterizing interactions between distinct web services using XML. Since the behaviors of web service composition are asynchronous, distributed, low-coupled and platform independent, we employ the guarded automata （GA） model for specifying the composition described in WS-CDL and using the simple promela interpreter （SPIN） model checker for detecting the collaborations of web services. Test cases can be transformed from counterexamples generated by SPIN using adequacy criteria. In this paper we apply the transition coverage criterion for generating counterex- amples. To illustrate our approach, we set ＂E-commerce service system＂ as an example for demonstrating how test cases can be generated using SPIN for compositions specified in WS-CDL.
基金supported by the National Natural Science Foundation of China (Nos. 61202110 and 61063013)the Natural Science Foundation of Jiangsu Province (No. BK2012284)
文摘The growing popularity and application of Web services have led to increased attention regarding the vulnerability of software based on these services. Vulnerability testing examines the trustworthiness and reduces the security risks of software systems. This paper proposes a worst-input mutation approach for testing Web service vulnerability based on Simple Object Access Protocol （SOAP） messages. Based on characteristics of SOAP messages, the proposed approach uses the farthest neighbor concept to guide generation of the test suite. The corresponding automatic test case generation algorithm, namely, the Test Case generation based on the Farthest Neighbor （TCFN）, is also presented. The method involves partitioning the input domain into sub-domains according to the number and type of SOAP message parameters in the TCFN, selecting the candidate test case whose distance is the farthest from all executed test cases, and applying it to test the Web service. We also implement and describe a prototype Web service vulnerability testing tool. The tool was applied to the testing of Web services on the Internet. The experimental results show that the proposed approach can find more vulnerability faults than other related approaches.
