Essentials of Web Services Testing

Download SOAPSonar™ Personal Edition FREE

I. Introduction:

II. Setup

Loading a Web Services Definition is easy. You can point to the WSDL's URL or drag-&- drop the WSDL file from your desktop. SOAPSonar™ immediately parses the WSDL and generates and easy to navigate operation list. You have a rich client that can send SOAP/XML Request Messages to your target Web Services and capture SOAP/XML responses. No coding required.

You can load as many WSDLs as you wish and mix-&-match tests across different WSDL operations. All test projects can be saved to your Desktop. SOAPSonar™ also provides operation chaining so that you can take outputs for an operation and use them as inputs to another operation.

III. Functional & Regression Testing:

SOAPSonar™ enables you to quickly test your Web Services and setup desired regression Test Cases. By dragging desired tests to the Test Case Management panel, you can setup Test Cases that can be saved and run to test for the functional quality of your Web Services.

SOAPSonar™ provides rich Security testing with integrated PKI and comprehensive support for Web Services Security & Identity including:

• WSS-UserName Token
• WSS-X509 Token
• WSS-Kerberos Token
• WSS-Encryption
• WSS-Signatures
• SAML Assertions
• SOAP with Attachments MIME & DIME

The results of the functional & regression tests are aggregated in PDF, XML and CSV reports.

IV. Performance:

SOAPSonar™ enables you to test the scalability and robustness of your Web Services. You can simply switch to Performance Mode in SOAPSonar™ and determine performance characteristics of your WSDL operations. All previously authored regression tests can be used for performance and scalability testing. You can run test for a specified duration to ensure that your Web Services are robust. You can also run the test for a specified number of iterations to measure Web Services performance and scalability. Up to 100 concurrent virtual clients can be setup to measure scalability.

SOAPSonar™ provides additional test agents to scale beyond 100 concurrent clients. Each SOAPSonar™ agent provides 100 additional virtual clients. There is no limit to the number of agents that can be managed by SOAPSonar™. All security and identity functionality is also available for testing your Web Services using SOAPSonar™ in Performance-Mode.

V. Interoperability:

During the loading process, SOAPSonar™ runs a set of comprehensive WSI Basic Profile 1.1 tests and reports interoperability issues with the loaded WSDL. Parts of the WSDL that failed the WSI Basic Profile 1.1 test are highlighted with details of the failed assertions and recommended remediation. Adhering to WSI Basic Profile 1.1 ensures that your components are interoperable and that your WSDL can be consumed by any .NET or Java client.

Design time WSDL interoperability testing is not enough. SOAPSonar™ extends interoperability compliance testing by auto-generating a suite of tests for your WSDL. The test suites are created for your WSDL through patent-pending WSI Profile Mutation technology. The tests ensure that your Web Services are interoperable by actively sending Mutant request to you Web Services and determining whether the Web Service responds per WSI Profile specification. Comprehensive design-time WSDL WSI Profile testing combined with active run-time Web Service interoperability behavior testing ensures that your Web Services is indeed interoperable. SOAPSonar™ provides detailed reports that highlight problem areas and recommended remediation.

VI. Vulnerability Assessment

With SOAPSonar™ Vulnerability assessment, Crosscheck Network has pioneered the area of active Web Services Vulnerability Assessment. Using patent-pending XSD-Mutation technology, SOAPSonar™ creates a comprehensive test suite of Mutant requests based on your WSDL. Through Automated Attack Functions (AAF™), SOAPSonar™ attacks your Web Services, captures the responses, and then uses Automated Vulnerability Detection (AVD™) to detect vulnerabilities in your Web Services.

SOAPSonar™ generates a comprehensive vulnerability report for your Web Services and highlights areas of exposure, severity levels, vulnerability diagnosis, and remediation techniques. Web Services Vulnerability Assessment is a crucial pre-production and post-production step that every .NET and Java developer and security professional must take to ensure risk mitigation within their Service Oriented Architecture.

VII. Summary

Web Services are the foundations of modern distributed applications. The ease and flexibility of integrating disparate components has made rapid application development possible across platforms, languages, operating systems and devices. This flexibility makes it critical for developers and security professionals to thoroughly test and certify their Web Services before publishing them to consumers.

Crosscheck Networks has built SOAPSonar™ to provide you comprehensive, code-free testing that is extremely easy to set up and run. You will be generating Functional, Performance, Interoperability and Vulnerability Report in minutes.

Download SOAPSonar™ Personal Edition FREE

Contact Information

<Crosscheck your Web Services/>™