An iterative metamorphic testing technique for web services and case studies

Many software security vulnerabilities only reveal themselves under certain conditions, that is, particular configurations and inputs together with a certain runtime environment. One approach to detecting these vulnerabilities is fuzz testing. However, typical fuzz testing makes no guarantees regarding the syntactic and semantic validity of the input, or of how much of the input space will be explored. To address these problems, the authors present a new testing methodology called Configuration Fuzzing. Configuration Fuzzing is a technique whereby the configuration of the running application is mutated at certain execution points to check for vulnerabilities that only arise in certain conditions. As the application runs in the deployment environment, this testing technique continuously fuzzes the configuration and checks “security invariants’’ that, if violated, indicate vulnerability. This paper discusses the approach and introduces a prototype framework called ConFu (CONfiguration FUzzing testing framework) for implementation. Additionally, the results of case studies that demonstrate the approach’s feasibility are presented along with performance evaluations.

Download Full-text

Extending Apache Axis for Monitoring of Web Service Offerings

Electronic Commerce ◽

10.4018/978-1-59904-943-4.ch053 ◽

2011 ◽

pp. 641-658

Author(s):

Vladimir Tosic ◽

Wei Ma ◽

Babak Pagurek ◽

Bernard Pagurek ◽

Hanan Lutfiyya

Keyword(s):

Web Services ◽

Web Service ◽

Open Source ◽

Case Studies ◽

Management Information ◽

Prototype Implementation ◽

Service Deployment ◽

Technical Details ◽

Service Offering ◽

The Web

The Web Service Offerings Infrastructure (WSOI) is a monitoring and management infrastructure for the Web Service Offerings Language (WSOL). It extends Apache Axis, an open-source tool for hosting Web services. We present technical details of several WSOI solutions for monitoring Web Services. To pass management information among management parties, we built WSOI serializer and WSOI deserializer modules converting data between formats of Axis’ MessageContext properties and SOAP headers. To perform different monitoring activities for different WSOL service offerings, we implemented Web Service Offering Descriptor (WSOD) as a complement to Axis’ Web Service Deployment Descriptor (WSDD) component. To represent run-time values of WSOL-related management information, we developed WSOI management information model. All these solutions were verified with a prototype implementation of WSOI 2.0 and validated on case studies.

Download Full-text

Extending Apache Axis for Monitoring of Web Service Offerings

Global Information Technologies ◽

10.4018/978-1-59904-939-7.ch072 ◽

2008 ◽

pp. 944-960

Author(s):

Vladimir Tosic ◽

Wei Ma ◽

Babak Esfandiari ◽

Bernard Pagurek ◽

Hanan Lutfiyya

Keyword(s):

Web Services ◽

Web Service ◽

Open Source ◽

Case Studies ◽

Management Information ◽

Prototype Implementation ◽

Service Deployment ◽

Technical Details ◽

Service Offering ◽

The Web

The Web Service Offerings Infrastructure (WSOI) is a monitoring and management infrastructure for the Web Service Offerings Language (WSOL). It extends Apache Axis, an open-source tool for hosting Web services. We present technical details of several WSOI solutions for monitoring Web Services. To pass management information among management parties, we built WSOI serializer and WSOI deserializer modules converting data between formats of Axis’ MessageContext properties and SOAP headers. To perform different monitoring activities for different WSOL service offerings, we implemented Web Service Offering Descriptor (WSOD) as a complement to Axis’ Web Service Deployment Descriptor (WSDD) component. To represent run-time values of WSOL-related management information, we developed WSOI management information model. All these solutions were verified with a prototype implementation of WSOI 2.0 and validated on case studies.

Download Full-text

E-Governance

E-Business Process Management ◽

10.4018/978-1-59904-204-6.ch001 ◽

2011 ◽

pp. 1-27

Author(s):

Srinivas Bhogle

Keyword(s):

Web Services ◽

Case Studies ◽

Computer Networks ◽

Cost Effective ◽

Communication Technologies ◽

Illustrative Case ◽

Digital Information ◽

Human Race ◽

Long Term Prognosis

E-governance uses Internet and communication technologies to automate governance in innovative ways, so that it becomes more efficient, more cost-effective, and empowers the human race even more. E-governance exercises are being attempted for more than a decade now, but have so far achieved only mixed success. The long-term prognosis for e-governance, however, remains extremely positive. The emergence of Web-services technologies, the continually proliferating computer networks, and the irreversible migration towards digital information strongly confirm the view that e-governance is here to stay. The eventual success of any e-governance project is intimately linked to the methodology used, and to that complex mesh between men, machines, and mindsets. We explain the “what,” “why,” and “how” of e-governance. We also talk of e-governance concerns, and discuss a few illustrative case studies.

Download Full-text

Application of Metamorphic Testing to a Case Study in Web Services Compositions

E-Business and Telecommunications - Communications in Computer and Information Science ◽

10.1007/978-3-642-35755-8_13 ◽

2012 ◽

pp. 168-181 ◽

Cited By ~ 2

Author(s):

Carmen Castro-Cabrera ◽

Inmaculada Medina-Bulo

Keyword(s):

Web Services ◽

Metamorphic Testing

Download Full-text

An Efficient Metamorphic Testing Technique Using Genetic Algorithm

Information Intelligence, Systems, Technology and Management - Communications in Computer and Information Science ◽

10.1007/978-3-642-19423-8_19 ◽

2011 ◽

pp. 180-188 ◽

Cited By ~ 3

Author(s):

Gagandeep Batra ◽

Jyotsna Sengupta

Keyword(s):

Genetic Algorithm ◽

Testing Technique ◽

Metamorphic Testing

Download Full-text

Detecting Integer Bugs without Oracle Based on Metamorphic Testing Technique

Applied Mechanics and Materials ◽

10.4028/www.scientific.net/amm.121-126.1961 ◽

2011 ◽

Vol 121-126 ◽

pp. 1961-1965 ◽

Cited By ~ 1

Author(s):

Song Huang ◽

Meng Yu Ji ◽

Zhan Wei Hui ◽

Yi Ting Duanmu

Keyword(s):

Formal Method ◽

General Procedure ◽

Testing Technique ◽

Metamorphic Testing ◽

Software Failures ◽

Mission Critical

Integer bugs are considered to be the rising threat to mission-critical software. For the oracle problem, testers always ignore integer bugs unless program throws an exception obviously. In this paper, we propose a general procedure based on metamorphic testing to detect integer bugs without oracle and a strategy of the metamorphic relation selection as the complement to T.Y.Chen’ one. The experiment result shows that our approach can detect some invisible mission-critical software failures caused by integer bugs, which are difficult to be found in conventional formal method.

Download Full-text

Metamorphic Testing for Web Services: Framework and a Case Study

2011 IEEE International Conference on Web Services ◽

10.1109/icws.2011.65 ◽

2011 ◽

Cited By ~ 14

Author(s):

Chang-ai Sun ◽

Guan Wang ◽

Baohong Mu ◽

Huai Liu ◽

ZhaoShun Wang ◽

...

Keyword(s):

Web Services ◽

Metamorphic Testing

Download Full-text

VERIFICATION OF PHYLOGENETIC INFERENCE PROGRAMS USING METAMORPHIC TESTING

Journal of Bioinformatics and Computational Biology ◽

10.1142/s021972001100563x ◽

2011 ◽

Vol 09 (06) ◽

pp. 729-747 ◽

Cited By ~ 8

Author(s):

MD. SHAIK SADI ◽

FEI-CHING KUO ◽

JOSHUA W. K. HO ◽

MICHAEL A. CHARLESTON ◽

T. Y. CHEN

Keyword(s):

Amino Acids ◽

Software Testing ◽

Evolutionary History ◽

Phylogenetic Inference ◽

Evolutionary Relationships ◽

Testing Technique ◽

Metamorphic Testing ◽

History Of ◽

Scoring Algorithms

Many phylogenetic inference programs are available to infer evolutionary relationships among taxa using aligned sequences of characters, typically DNA or amino acids. These programs are often used to infer the evolutionary history of species. However, in most cases it is impossible to systematically verify the correctness of the tree returned by these programs, as the correct evolutionary history is generally unknown and unknowable. In addition, it is nearly impossible to verify whether any non-trivial tree is correct in accordance to the specification of the often complicated search and scoring algorithms. This difficulty is known as the oracle problem of software testing: there is no oracle that we can use to verify the correctness of the returned tree. This makes it very challenging to test the correctness of any phylogenetic inference programs. Here, we demonstrate how to apply a simple software testing technique, called Metamorphic Testing, to alleviate the oracle problem in testing phylogenetic inference programs. We have used both real and randomly generated test inputs to evaluate the effectiveness of metamorphic testing, and found that metamorphic testing can detect failures effectively in faulty phylogenetic inference programs with both types of test inputs.

Download Full-text