Automated Testing and Response Analysis of Web Services

1
Automated Testing and Response Analysis of Web
Services

• Report Guang-Shung Liao

2
Reference 1

• Evan Martin, Suranjana Basu, and Tao Xie,
  "Automated Testing and Response Analysis of Web
  Services," IEEE International Conference on Web
  Services, 2007., Salt Lake City, UT, USA, July
  2007, pp.647-654.

3
Reference 2

• http//www.jchq.net/certkey/0803certkey.htm
• http//web.nchu.edu.tw/jlu/cyut/soap.shtml
• http//ws.apache.org/axis/java/user-guide.html
• http//www.cc.gatech.edu/jcrasher/

4
Outline

• Introduction
• WebSob Framework
• WSDL2Java
• JCrasher
• TCPMonitor
• Conclusion

5
Introduction

• WebSob
• The framework in order to detect robustness
  problems
• Supporting tools
• Automatically generating web-service requests
• Automatically executing web-service requests
• Analyzing the subsequent request-response pairs

6
WebSob Framework 1

• Code Generation
• Test Generation
• Test Execution
• Response Analysis

7
WebSob Framework 2
8
WebSob Framework 3

• Supporting Tools
• Code Generation
• WSDL2Java
• Test Generation
• JCrasher
• Test Execution
• JUnit
• Response Analysis
• TCPMonitor

9
WSDL2Java 1

• The Axis utility class
• Parsed the WSDL and generated necessary Java files

10
WSDL2Java 2
11
WSDL2Java 3
WSDL file
WSDL2Java generate
12
JCrasher 1

• Third-party test generation tool
• Automatically generates JUnit tests for a given
  Java class

13
JCrasher 2

• Test Case Generating Type
• Numeric data types
• -1, 0, 1
• String type
• Special characters !_at_.......
• String size more than 100 characters

14
JCrasher 3
JCrasher generated test case
Java class
JCrasher
15
TCPMonitor 1

• The Axis utility
• Provided to monitor the SOAP service being used

16
TCPMonitor 2
17
TCPMonitor 3

• Four main types of encountered exceptions
• 404 File Not Found
• 405 Method Not Allowed
• 500 Internal Server Exception
• Hang
• the server takes more than one minute to return a
  response

18
(No Transcript)
19
Conclusion

• Such a tool to web services testing is useful
  when a service provider also relies on a
  third-party service provider to function correctly