Testing web database applications

ABSTRACT

Commercial, scientific, and social activities are increasingly becoming dependent on Web database applications. New testing techniques that handle the unique features of these systems are needed. To that end, we have extended AGENDA, a tool set for testing relational database applications, to test web database applications. Application source code is analyzed to extract relevant information about the URLs and their parameters. This information is used to construct and simplify a graph in which nodes represent URLs and edges represent links between URLs. A set of paths through the graph is selected and test cases are generated for each path. The extracted information about the parameters to each URL (e.g., values that an application user would enter into a form), is used to guide AGENDA to generate inputs for the URLs. The URLs on a path and their inputs are stored in an XML file, which is then automatically executed. The current implementation is targeted toward web applications written as Java Servlets and uses an algorithm based on cyclomatic complexity to generate paths. Preliminary empirically evaluation based on the TPC-W benchmark is presented.

REFERENCES

• 1: M. Benedikt, J. Freire, and P. Godefroid. Veriweb: Automatically testing dynamic web sites. In 11th International World Wide Web Conference. ACM Press, 2002.
• 2: BIGSF. Government Web Application Integrity. The Business Internet Group of San Francisco, 2003.
• 3: Morris Marden, An Architectural Evaluation of Java TPC-W, Proceedings of the 7th International Symposium on High-Performance Computer Architecture, p.229, January 20-24, 2001
• 4: David Chays , Saikat Dan , Phyllis G. Frankl , Filippos I. Vokolos , Elaine J. Weber, A framework for testing database applications, Proceedings of the 2000 ACM SIGSOFT international symposium on Software testing and analysis, p.147-157, August 21-24, 2000, Portland, Oregon, United States
• 5: David Chays , Yuetang Deng , Phyllis G. Frankl , Saikat Dan , Filippos I. Vokolos , Elaine J. Weyuker, An AGENDA for testing relational database applications: Research Articles, Software Testing, Verification & Reliability, v.14 n.1, p.17-44, March 2004 [doi>10.1002/stvr.v14:1]
• 6: Sebastian Elbaum , Srikanth Karre , Gregg Rothermel, Improving web application testing with user session data, Proceedings of the 25th International Conference on Software Engineering, May 03-10, 2003, Portland, Oregon
• 7: Chia-Lin Hsu , Hsien-Chou Liao , Jiun-Liang Chen , Feng-Jian Wang, A Web Database Application Model for Software Maintenance, Proceedings of the The Fourth International Symposium on Autonomous Decentralized Systems, p.338, March 20-23, 1999
• 8: http://www.sable.mcgill.ca/soot/. Soot: a Java Optimization Framework. 2002.
• 9: Yao-Wen Huang , Shih-Kun Huang , Tsung-Po Lin , Chung-Hung Tsai, Web application security assessment by fault injection and behavior monitoring, Proceedings of the 12th international conference on World Wide Web, May 20-24, 2003, Budapest, Hungary [doi>10.1145/775152.775174]
• 10: Jakarta Commons HttpClient. http://jakarta.apache.org/commons/httpclient/. 2003.
• 11: Chien-Hung Liu , David C. Kung , Pei Hsia , Chih-Tung Hsu, Structural Testing of Web Applications, Proceedings of the 11th International Symposium on Software Reliability Engineering (ISSRE'00), p.84, October 08-11, 2000
• 12: T. McCabe. A complexity measure. IEEE Transactions on Software Engineering, Dec. 1976.
• 13: M. Morrison and J. Morrison. Database-Driven Web Sites. Course Technology, 2003.
• 14: T. J. Ostrand , M. J. Balcer, The category-partition method for specifying and generating fuctional tests, Communications of the ACM, v.31 n.6, p.676-686, June 1988 [doi>10.1145/62959.62964]
• 15: Filippo Ricca , Paolo Tonella, Analysis and testing of Web applications, Proceedings of the 23rd International Conference on Software Engineering, p.25-34, May 12-19, 2001, Toronto, Ontario, Canada
• 16: Thomas J. McCabe , Charles W. Butler, Design complexity measurement and testing, Communications of the ACM, v.32 n.12, p.1415-1425, Dec. 1989 [doi>10.1145/76380.76382]
• 17: Transaction Processing Performance Council. TPC-Benchmark W. www.tpc.org, 2002.
• 18: Arthur Henry Watson, Structured testing: analysis and extensions, 1996
• 19: Y. Wu and J. Offutt. Modeling and testing web-based applications. In CS Technical Report. George Mason University, 2002.

INDEX TERMS

Keywords:
database, software testing, web application