Click here to Skip to main content
15,350,015 members
Articles / Product Showcase
Posted 9 Jan 2006


34 bookmarked

Essentials of Web Services Testing

9 Jan 20064 min read
Test your Web Services quickly for robustness, security and interoperability with a .NET tool without writing custom testing code.

This article is in the Product Showcase section for our sponsors at CodeProject. These articles are intended to provide you with information on products and services that we consider useful and of value to developers.

Image 1Image 2 Download SOAPSonar™ Personal Edition FREE

I. Introduction:

All your software components use Web Services making it critical for you to rapidly test your Web Services. SOAPSonar™ is the only product that provides comprehensive Web Services Testing.

Using innovative WSDL-Mutation and WSI-Mutation technology, SOAPSonar™ actively and aggressively tests your Web Services and provides easy to read functional, performance, interoperability and vulnerability reports.

As you and your team builds robust, secure, and interoperable Web Services-enabled components, the quality and repeatability of your IT assets improve dramatically, lowering your cost of maintenance and future development.

Image 3

II. Setup

Loading a Web Services Definition is easy. You can point to the WSDL's URL or drag-&- drop the WSDL file from your desktop. SOAPSonar™ immediately parses the WSDL and generates and easy to navigate operation list. You have a rich client that can send SOAP/XML Request Messages to your target Web Services and capture SOAP/XML responses. No coding required.

Image 4

You can load as many WSDLs as you wish and mix-&-match tests across different WSDL operations. All test projects can be saved to your Desktop. SOAPSonar™ also provides operation chaining so that you can take outputs for an operation and use them as inputs to another operation.

III. Functional & Regression Testing:

SOAPSonar™ enables you to quickly test your Web Services and setup desired regression Test Cases. By dragging desired tests to the Test Case Management panel, you can setup Test Cases that can be saved and run to test for the functional quality of your Web Services.

Image 5

SOAPSonar™ provides rich Security testing with integrated PKI and comprehensive support for Web Services Security & Identity including:

  • WSS-UserName Token
  • WSS-X509 Token
  • WSS-Kerberos Token
  • WSS-Encryption
  • WSS-Signatures
  • SAML Assertions
  • SOAP with Attachments MIME & DIME

The results of the functional & regression tests are aggregated in PDF, XML and CSV reports.

IV. Performance:

SOAPSonar™ enables you to test the scalability and robustness of your Web Services. You can simply switch to Performance Mode in SOAPSonar™ and determine performance characteristics of your WSDL operations. All previously authored regression tests can be used for performance and scalability testing. You can run test for a specified duration to ensure that your Web Services are robust. You can also run the test for a specified number of iterations to measure Web Services performance and scalability. Up to 100 concurrent virtual clients can be setup to measure scalability.

SOAPSonar™ provides additional test agents to scale beyond 100 concurrent clients. Each SOAPSonar™ agent provides 100 additional virtual clients. There is no limit to the number of agents that can be managed by SOAPSonar™. All security and identity functionality is also available for testing your Web Services using SOAPSonar™ in Performance-Mode.

V. Interoperability:

During the loading process, SOAPSonar™ runs a set of comprehensive WSI Basic Profile 1.1 tests and reports interoperability issues with the loaded WSDL. Parts of the WSDL that failed the WSI Basic Profile 1.1 test are highlighted with details of the failed assertions and recommended remediation. Adhering to WSI Basic Profile 1.1 ensures that your components are interoperable and that your WSDL can be consumed by any .NET or Java client.

Design time WSDL interoperability testing is not enough. SOAPSonar™ extends interoperability compliance testing by auto-generating a suite of tests for your WSDL. The test suites are created for your WSDL through patent-pending WSI Profile Mutation technology. The tests ensure that your Web Services are interoperable by actively sending Mutant request to you Web Services and determining whether the Web Service responds per WSI Profile specification. Comprehensive design-time WSDL WSI Profile testing combined with active run-time Web Service interoperability behavior testing ensures that your Web Services is indeed interoperable. SOAPSonar™ provides detailed reports that highlight problem areas and recommended remediation.

VI. Vulnerability Assessment

With SOAPSonar™ Vulnerability assessment, Crosscheck Network has pioneered the area of active Web Services Vulnerability Assessment. Using patent-pending XSD-Mutation technology, SOAPSonar™ creates a comprehensive test suite of Mutant requests based on your WSDL. Through Automated Attack Functions (AAF™), SOAPSonar™ attacks your Web Services, captures the responses, and then uses Automated Vulnerability Detection (AVD™) to detect vulnerabilities in your Web Services.

Image 6

SOAPSonar™ generates a comprehensive vulnerability report for your Web Services and highlights areas of exposure, severity levels, vulnerability diagnosis, and remediation techniques. Web Services Vulnerability Assessment is a crucial pre-production and post-production step that every .NET and Java developer and security professional must take to ensure risk mitigation within their Service Oriented Architecture.

VII. Summary

Web Services are the foundations of modern distributed applications. The ease and flexibility of integrating disparate components has made rapid application development possible across platforms, languages, operating systems and devices. This flexibility makes it critical for developers and security professionals to thoroughly test and certify their Web Services before publishing them to consumers.

Crosscheck Networks has built SOAPSonar™ to provide you comprehensive, code-free testing that is extremely easy to set up and run. You will be generating Functional, Performance, Interoperability and Vulnerability Report in minutes.

Image 7 Download SOAPSonar™ Personal Edition FREE

Contact Information

Phone: 1-888-CROSSCK (276-7725)
1 617-938-3956 (from outside US)

<Crosscheck your Web Services/>™


This article has no explicit license attached to it but may contain usage terms in the article text or the download files themselves. If in doubt please contact the author via the discussion board below.

A list of licenses authors might use can be found here


About the Author

Crosscheck Networks
United States United States
No Biography provided

Comments and Discussions

GeneralArray list as Parameter of Web Method in Webservice Pin
Shivraj Patil18-May-06 19:22
MemberShivraj Patil18-May-06 19:22 
GeneralRe: Array list as Parameter of Web Method in Webservice Pin
Crosscheck Networks19-May-06 12:51
MemberCrosscheck Networks19-May-06 12:51 
GeneralRe: Array list as Parameter of Web Method in Webservice Pin
Shivraj Patil21-May-06 18:31
MemberShivraj Patil21-May-06 18:31 
GeneralRe: Array list as Parameter of Web Method in Webservice Pin
Crosscheck Networks22-May-06 5:34
MemberCrosscheck Networks22-May-06 5:34 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.