1. 15 Oct. 2008 Workshop on Web Service and Testing 1 Towards Service-Oriented Testing of Web Services Hong Zhu Department of Computing, Oxford Brookes University Oxford OX33 1HX, UK Yufeng Zhang Dept of Computer Sci, National Univ. of Defense Tech., Changsha, China, Email: yuffonzhang@163.comyuffonzhang@163.com

2. 15 Oct. 2008 2 Workshop on Web Service and Testing Overview Motivation The impact of WS on software testing The requirements on supports to testing WS Proposed framework Prototype implementation Case studies Conclusion

3. 15 Oct. 2008 3 Workshop on Web Service and Testing Characteristics of Web Services The components (services) of WS applications Autonomous: control their own resources and their own behaviours Active: execution not triggered by message, and Persistent: computational entities that last long time Interactions between services: Social ability: discover and establish interaction at runtime Collaboration: as opposite to control, may refuse service, follow a complicated protocol, etc.

4. 15 Oct. 2008 4 Workshop on Web Service and Testing WS technique stack Basic standards: WSDL: service description and publication UDDI: for service registration and retrieval SOAP for service invocation and delivery More advanced standards for collaborations between service providers and requesters. BPEL4WS: business process and workflow models. OWL-S: ontology for the description of semantics of services Registry ProviderRequester Search for services registered services register service request service deliver service

5. 15 Oct. 2008 5 Workshop on Web Service and Testing Testing developers own services Service has similarity to test software components Many existing work on software component testing can be applied or adapted Requires special considerations: The stateless feature of HTTP protocol; XML encoding of the data passing between services as in SOAP standard; Confirmation to the published descriptions: WSDL for the syntax of the services workflow specification in BPEL4WS semantic specification in e.g. OWL-S.

6. 15 Oct. 2008 6 Workshop on Web Service and Testing Testing developers own services (continue) Dealing with requesters abnormal behaviours The requesters are autonomous, their behaviours may be unexpected Need to ensure that the service handles abnormal behaviours properly Dealing with unexpected usages/loads As all web-based applications, load balance is essential. The usage of a WS may not be available during the design and implementation of the system. Dealing with incomplete systems A service may have to rely on other services, thus hard to separate the testing of the own services from the integration testing, especially when it involves complicated workflows. In the worst case, when dynamically bound to the other services

7. 15 Oct. 2008 7 Workshop on Web Service and Testing Testing of others services in composition Some similarity to component integration However, the differences are dominant Problems in the application of existing integration testing techniques: Lack of software artifacts Lack of control over test executions Lack of means of observation on system behaviour

8. 15 Oct. 2008 8 Workshop on Web Service and Testing Lack of software artifacts The problem: No design documents, No source code, No executable code The impacts: For statically bound services, Techniques that automatically derive stubs from source code are not applicable Automatic instrumentation of original source code or executable code is not applicable For dynamic bound services, Human involvement in the integration becomes impossible. Possible solutions: (a) Derive test harness from WS descriptions; (b) The service provider to make the test stubs and drivers available for integration.

9. 15 Oct. 2008 9 Workshop on Web Service and Testing Lack of control over test executions Problem: Services are typically located on a computer on the Internet that testers have no control over its execution. Impact: An invocation of the service as a test must be distinguished from a real request of the service. System may be need to be restarted or put into a certain state to test it. The situation could become much more complicated when a WS is simultaneously tested by many service requesters. Possible solution: The service provider must provide a mechanism and a service that enable service requesters to control the testing executions of the service. Currently, there is no support to such mechanisms in W3C standards of WS.

10. 15 Oct. 2008 10 Workshop on Web Service and Testing Lack of means of observation The problem: A tester cannot observe the internal behaviours of the services The Impacts: No way to measure test coverage No way to ensure internal state is correct Possible solutions: The service provider provides a mechanism and the services to the outside tester to observe its softwares internal behaviour in order to achieve the test adequacy that a service requester requires. The service provider opens its document, source code as well as other software artifacts that are necessary for testing to some trusted test service providers.

11. 15 Oct. 2008 11 Workshop on Web Service and Testing The proposed approach A WS should be accompanied by a testing service. functional services: the services of the original functionality testing services: the services to enable test the functional services Testing services can be either provided by the same vendor of the functional services, or by a third party.

12. 15 Oct. 2008 12 Workshop on Web Service and Testing Architecture of service oriented testing Broker T-services of A 1 F-services of A 1 Matchmaker UDDI Registry GUI F-services of Tester T 1 T-services of Tester T 1 F-services of Tester T 2 T-services of Tester T 2 T-services of A 2 F-services of A 2 Ontology management

13. 15 Oct. 2008 13 Workshop on Web Service and Testing A Typical Scenario: Car Insurance Broker CIBs F-Services Bank Bs F-Services Insurance A 1 s F- Services Insurance A 2 s F- Services Insurance A n s F- Services GUI Interface WS Registry CIBs service requester Bank Bs T-Services Insurance A 1 s T- Services Insurance A 2 s T- Services Insurance A n s T- Services CIBs T-Services Tester T 1 F-Services Tester T 1 T-Services Test Broker F-Services Test Broker T-Services Tester T 2 F-Services Tester T 2 T-Services

14. 15 Oct. 2008 14 Workshop on Web Service and Testing How does it work? Suppose the car insurance broker want to search for web services of insurers and test the web service before making quote for its customers. Car Insurance Broker CIB Insurer Web Service IS customer Information about the car and the user Insurance quotes Testing the integration of two services

15. 15 Oct. 2008 15 Workshop on Web Service and Testing Car Insurance Broker CIB Insurer Web Service IS (F-Service) Test Broker:TB.3.Request test service Insurer Web Service:IS (T-Service) Matchmaker Testing Service: TG(Test case Generator) Testing Service:TE (Test Executor) 8.Testing related meta-data 16.Test report 7.Request service meta-data. 12.Testing related meta-data 0. Intended composition of services 9.Test case 6.Request test service 2Register service 10.Request test service 15.Test results 1Register service 5.List of testers 13.Test invocation of services 14.Results of test invocation of services 4. Search for testers Test Broker 11.Request service meta-data

16. 15 Oct. 2008 16 Workshop on Web Service and Testing Key Issues to Automate Test Services How a testing service should be described, published and registered at WS registry; How a testing service can be searched and retrieved automatically even for testing dynamically bound services; How a testing service can be invoked by both a human tester and a program to dynamically discover a service and then test it before bind to it. How testing results can be summarized and reported in the forms that are suitable for both human beings to read and machine to understand. These issues can be resolved by the utilization of a software testing ontology (Zhu & Huo 2003, 2005).

17. 15 Oct. 2008 17 Workshop on Web Service and Testing STOWS: Software Testing Ontology for WS Ontology defines the basic terms and relations comprising the vocabulary of a topic area as well as the rules for combining them to define extensions to the vocabulary STOWS is base on an ontology of software testing originally developed for agent oriented software testing (Zhu & Huo 2003, 2005). The concepts of software testing are divided into two groups. Knowledge about software testing are also represented as relations between concepts

18. 15 Oct. 2008 18 Workshop on Web Service and Testing STOWS (1): Basic concepts Tester: a particular party who carries out a testing activity. Activity: consists of actions performed in testing process, including test planning, test case generation, test execution, result validation, adequacy measurement and test report generation, etc. Artefact: the files, data, program code and documents etc. inovlved in testing activities. An Artefact possesses an attribute Location expressed by a URL or a URI. Method: the method used to perform a test activity. Test methods can be classified in a number of different ways. Context: the context in which testing activities may occur in software development stages to achieve various testing purposes. Testing contexts typically include unit testing, integration testing, system testing, regression testing, etc. Environment. The testing environment is the hardware and software configurations in which a testing is to be performed.

19. 15 Oct. 2008 19 Workshop on Web Service and Testing STOWS (2): Compound concepts Capability : describes what a tester can do Capability MethodActivity EnvironmentContext Capability Data Artefact > Capability Data Type Input Output 1 1 0-1 0-* 1-* the activities that a tester can perform the context to perform the activity the testing method used the environment to perform the testing the required resources (i.e. the input) the output that the tester can generate

20. 15 Oct. 2008 20 Workshop on Web Service and Testing Task : describes what testing service is requested A testing activity to be performed How the activity is to be performed: the context the testing method to be used the environment in which the activity must be carried out the available resources the expected outcomes Task MethodActivity EnvironmentContext Task Data Artefact > Task Data Type Input Output 0-1 1 11-*

21. 15 Oct. 2008 21 Workshop on Web Service and Testing STOWS (3): Relations between concepts Relationships between concepts are a very important part of the knowledge of software testing: Subsumption relation between testing methods Compatibility between artefacts formats Enhancement relation between environments Inclusion relation between test activities Temporal ordering between test activities How such knowledge is used: Instances of basic relations are stored in a knowledge-base as basic facts Used by the testing broker to search for test services through compound relations

22. 15 Oct. 2008 22 Workshop on Web Service and Testing Compound relations MorePowerful relation: between two capabilities. MorePowerful(c 1, c 2 ) means that a tester has capability c 1 implies that the tester can do all the tasks that can be done by a tester who has capability c 2. Contains relation: between two tasks. Contains(t 1, t 2 ) means that accomplishing task t 1 implies accomplishing t 2. Matches relation: between a capability and a task. Match(c, t) means that a tester with capability c can fulfil the task t.

23. 15 Oct. 2008 23 Workshop on Web Service and Testing Prototype Implementation STOWS is represented in OWL-S Basic concepts as XML data definition Compound concepts defined as service profile UDDI /OWL-S registry server (as the test broker): Using OWL-S/UDDI Matchmaker The environment: Windows XP, Intel Core Duo CPU 2.16GHz, Jdk 1.5, Tomcat 5.5 and Mysql 5.0.

24. 15 Oct. 2008 24 Workshop on Web Service and Testing Case Study: An automated software testing tool CASCAT is wrapped into a test service Registered: Capability is described in the ontology represented in OWL-S Searchable: It can be searched when the testing task matches its capability Invoked through the internet As a web services to generation test cases based on algebraic specification A web service and its corresponding test service are implemented Both registered Testing of the WS can be invoked through the corresponding T-Service

25. 15 Oct. 2008 25 Workshop on Web Service and Testing Conclusion Challenges to testing web services applications Testing a web service as developers own software Integration testing at development and at run-time No support in current WS standard stack A service oriented approach is proposed Architecture fits well into service oriented architecture Supported by software testing ontology Feasibility of the approach tested via a case study.

26. 15 Oct. 2008 26 Workshop on Web Service and Testing Advantages Automated process to meet the requirements of on-the- fly service integration testing Automation without human involvement Testing without interference to providing normal functional services Testing without affect the real world state Security and IPR can be managed through a certification and authentication mechanism for third party specialised testing services Business opportunities for testing tool vendors and software testing companies to provide testing services online as web services

27. 15 Oct. 2008 27 Workshop on Web Service and Testing Remaining challenges and future work Technical challenges To develop a complete ontology of software testing (e.g. the formats of many different representations of testing related artefacts) To implement the test brokers efficiently To device the mechanism of certification and authentication for testing services Social challenges For the above approach to be practically useful, it must be adopted by web service developers, testing tool vendors and software testing companies Need standards, such as a standard of software testing ontology

28. 15 Oct. 2008 28 Workshop on Web Service and Testing References Zhang, Y. and Zhu, H., Ontology for Service Oriented Testing of Web Services, Proc. of The Fourth IEEE International Symposium on Service-Oriented System Engineering (SOSE 2008), Dec. 18-19, 2008, Taiwan. In press. Zhu, H., A Framework for Service-Oriented Testing of Web Services, Proc. of COMPSAC06, Sept. 2006, pp679-691. Zhu, H. and Huo, Q., Developing A Software Testing Ontology in UML for A Software Growth Environment of Web-Based Applications, Chapter IX: Software Evolution with UML and XML, Hongji Yang (ed.). IDEA Group Inc. 2005, pp263-295. Zhu, H. Cooperative Agent Approach to Quality Assurance and Testing Web Software, Proc. of QATWBA04/COMPSAC04, Sept. 2004, IEEE CS, Hong Kong,pp110-113. Zhu, H., Huo, Q. and Greenwood, S., A Multi-Agent Software Environment for Testing Web-based Applications, Proc. of COMPSAC03, 2003, pp210-215.