Skip to main content

Cost-Effective Testing for Critical Off-the-Shelf Services

  • Conference paper
Computer Safety, Reliability, and Security (SAFECOMP 2014)

Part of the book series: Lecture Notes in Computer Science ((LNPSE,volume 8696))

Included in the following conference series:

Abstract

Defining cost-effective verification and validation tools is one of the biggest research challenges of the area. Such tools speedup and reduce the cost of the assessment of Off-The-Shelf (OTS) software components that must undergo proper certification or approval processes to be used in critical scenarios. Previously we introduced the design of framework for testing of critical OTS applications and services, to improve reusability, thus aiming to reduce testing time and costs. In this paper we present an implementation of the framework that allows applying, in a cost-effective fashion, functional testing, robustness testing and penetration testing to web services. We present details on the implementation and we describe the procedure to use the framework to conduct testing campaigns in web services. Finally, the framework usability and utility is demonstrated based on a case study.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 39.99
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 54.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

References

  1. Antunes, N., et al.: A monitoring and testing framework for critical off-the-shelf applications and services. In: 2013 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW), pp. 371–374 (2013)

    Google Scholar 

  2. Antunes, N., Vieira, M.: Detecting SQL Injection Vulnerabilities in Web Services. In: Fourth Latin-American Symposium on Dependable Computing 2009 (LADC 2009), pp. 17–24. IEEE Computer Society, Joao Pessoa (2009)

    Chapter  Google Scholar 

  3. Ceccarelli, A., et al.: A Testbed for Evaluating Anomaly Detection Monitors Through Fault Injection. In: 5th IEEE Workshop on Self-Organizing Real-Time Systems (SORT 2014), Reno, Nevada, USA (2014)

    Google Scholar 

  4. IEC 61508 TC: IEC 61508, Functional Safety of Electrical/Electronic/Programmable Elec-tronic (E/E/PE) Safety Related Systems, Part 3: Software Requirements. IEC, Geneva, Swiss (1998)

    Google Scholar 

  5. IEEE Computer Society. Software & Systems Engineering Standards Committee: 1012-2012 - IEEE Standard for System and Software Verification and Validation. IEEE Computer Society (2012)

    Google Scholar 

  6. ISO 26262: Road vehicles - Functional safety - Part 6: Product development at the software level (2011)

    Google Scholar 

  7. Koopman, P., DeVale, J.: Comparing the robustness of POSIX operating systems. In: Twenty-Ninth Annual International Symposium on Fault-Tolerant Computing. Digest of Papers, pp. 30–37 (1999)

    Google Scholar 

  8. Laranjeiro, N., et al.: Improving Web Services Robustness. In: IEEE 7th International Conference on Web Services (ICWS 2009), Los Angeles, CA, USA, pp. 397–404 (2009)

    Google Scholar 

  9. Laranjeiro, N., et al.: Wsrbench: An On-Line Tool for Robustness Benchmarking. In: IEEE International Conference on Services Computing, SCC 2008, pp. 187–194 (2008)

    Google Scholar 

  10. Liferay, Inc.: Liferay Portal, http://www.liferay.com/

  11. Prasad, V., et al.: Locating system problems using dynamic instrumentation. In: 2005 Ottawa Linux Symposium, pp. 49–64 (2005)

    Google Scholar 

  12. Tran, E.: Verification/Validation/Certification. In: Koopman, P. (ed.) Topics in Dependable Embedded Systems. Carnegie Mellon University (1999)

    Google Scholar 

  13. Vieira, M., et al.: Benchmarking the Robustness of Web Services. In: 13th Pacific Rim International Symposium on Dependable Computing, PRDC 2007, pp. 322–329 (2007)

    Google Scholar 

  14. RTCA DO-178C/EUROCAE ED-12C - Software Considerations in Airborne Systems and Equipment Certification (2011)

    Google Scholar 

Download references

Author information

Authors and Affiliations

Authors

Editor information

Editors and Affiliations

Rights and permissions

Reprints and permissions

Copyright information

© 2014 Springer International Publishing Switzerland

About this paper

Cite this paper

Duchi, F., Antunes, N., Ceccarelli, A., Vella, G., Rossi, F., Bondavalli, A. (2014). Cost-Effective Testing for Critical Off-the-Shelf Services. In: Bondavalli, A., Ceccarelli, A., Ortmeier, F. (eds) Computer Safety, Reliability, and Security. SAFECOMP 2014. Lecture Notes in Computer Science, vol 8696. Springer, Cham. https://doi.org/10.1007/978-3-319-10557-4_26

Download citation

  • DOI: https://doi.org/10.1007/978-3-319-10557-4_26

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-319-10556-7

  • Online ISBN: 978-3-319-10557-4

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics