Quality Analysis of Composed Services through Fault Injection

Fugini, Mariagrazia; Pernici, Barbara; Ramoni, Filippo

doi:10.1007/978-3-540-78238-4_25

Cited by 6 publications

(9 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Testing technique based on FSM is common; in the literatures [19][20][21], FSM is used to represent static and dynamic information of tested component. The EFSM is extended from FSM.…”

Section: The Transformation Relationship Between Methods Sequences Andmentioning

confidence: 99%

See 1 more Smart Citation

An approach of security testing for third‐party component based on state mutation

Chen

Huang

et al. 2015

Security Comm Networks

View full text Add to dashboard Cite

It is essential to study an effective approach of security testing for third-party component. In this paper, to effectively trigger implicit vulnerabilities of third-party components, an approach of security testing for third-party component is proposed based on state mutation. To start with, executable method sequences of components are transformed into extended finite state machine. Then, according to characteristics of condition conflict and behavior conflict, two test case generation algorithms are addressed, that is, Operations Conflict Sequences Generation Algorithm and Conditions Conflict Sequences Generation Algorithm, which are designed to generate inaccessible sequences of behavior and condition conflicts. These conflict sequences are run. Furthermore, the security detecting algorithms are addressed to detect implicit vulnerabilities of third-party components, and then, testing report of component security is obtained. In the end, some experiments are conducted on the basis of the proposed approach, and the experimental results show that the proposed approach can effectively detect security exceptions of third-party components.

show abstract

“…Testing technique based on FSM is common; in the literatures [19][20][21], FSM is used to represent static and dynamic information of tested component. The EFSM is extended from FSM.…”

Section: The Transformation Relationship Between Methods Sequences Andmentioning

confidence: 99%

“…Hoijin et al [19,20] applied fault injection and mutation analysis techniques to check customization and composition faults. Fugini et al [21] analyzed the quality of composed services through injecting data faults and delays that perturbed the messages and data stored in databases used by services provider.…”

Section: Related Workmentioning

confidence: 99%

An approach of security testing for third‐party component based on state mutation

Chen

Huang

et al. 2015

Security Comm Networks

View full text Add to dashboard Cite

show abstract

“…In the literature, fault injection methodologies are applied in different domains, such as hardware and software testing (Hsueh et al 1997;Ziade et al 2004) and composed web services (Fugini et al 2009). In assessing the quality of web services, Fugini et al (2009) use faults injection to evaluate the impact of the quality of composed services considering data faults and time delays. Data faults can be originated by value mismatches, different formats, missing data, or delays in update operations.…”

Section: Related Workmentioning

confidence: 99%

“…In this case, faults injection aims to trigger web service timeouts, i.e., mechanisms that are activated if a web service does not respond within predetermined time intervals. Effects on the outcome of the process may vary; Fugini et al (2009) propose measuring the severity of a fault considering wheter it causes a failure in the service and, in case of data faults, to measure the distance between the origin of the fault and the point of the composed service where it is detected. Fugini et al (2009) clearly show that system behavior simulation with fault injections is very useful because it makes it possible to detect the system weaknesses and then select the appropriate corrective actions to improve the overall system quality.…”

Section: Related Workmentioning

confidence: 99%

“…Effects on the outcome of the process may vary; Fugini et al (2009) propose measuring the severity of a fault considering wheter it causes a failure in the service and, in case of data faults, to measure the distance between the origin of the fault and the point of the composed service where it is detected. Fugini et al (2009) clearly show that system behavior simulation with fault injections is very useful because it makes it possible to detect the system weaknesses and then select the appropriate corrective actions to improve the overall system quality. However, in Fugini et al (2009), the focus was on assessing the impact of poor data quality on the process execution rather than on assessing its impact on the quality of the result, which is the focus of this article.…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

Validating Data Quality Actions in Scoring Processes

Cappiello

Cerletti

Fratto

et al. 2017

J. Data and Information Quality

View full text Add to dashboard Cite

Data quality has gained momentum among organizations upon the realization that poor data quality might cause failures and/or inefficiencies, thus compromising business processes and application results. However, enterprises often adopt data quality assessment and improvement methods based on practical and empirical approaches without conducting a rigorous analysis of the data quality issues and outcome of the enacted data quality improvement practices. In particular, data quality management, especially the identification of the data quality dimensions to be monitored and improved, is performed by knowledge workers on the basis of their skills and experience. Control methods are therefore designed on the basis of expected and evident quality problems; thus, these methods may not be effective in dealing with unknown and/or unexpected problems. This article aims to provide a methodology, based on fault injection, for validating the data quality actions used by organizations. We show how it is possible to check whether the adopted techniques properly monitor the real issues that may damage business processes. At this stage, we focus on scoring processes, i.e., those in which the output represents the evaluation or ranking of a specific object. We show the effectiveness of our proposal by means of a case study in the financial risk management area.

show abstract