Parasoft Soatest Starter Kit Data Sheet Siemens Case Study Lufthansa Case Study
Total Page:16
File Type:pdf, Size:1020Kb
Parasoft SOAtest Starter Kit Data Sheet Siemens Case Study Lufthansa Case Study SOAtest TM Parasoft SOAtest is the industry's premier testing platform for service-oriented architectures and composite applications. Parasoft SOAtest helps QA teams ensure secure, reliable, compliant business applications with an intuitive interface to create, maintain and execute end-to-end testing scenarios. It was built from the ground up to reduce the complexities inherent in complex, distributed applications. Since 2002, Parasoft customers such as HP, IBM, Fidelity, Lockheed Martin, and the IRS have relied on SOAtest for: Ensuring the reliability, security, and compliance of SOA, cloud, and web applications Reducing the time and effort required to construct and maintain automated tests Automatically and continuously validating complex business scenarios Facilitating testing in incomplete and/or evolving environments Validating performance and functionality expectations under load Rapidly diagnosing problems directly from the test environment Service Virtualization with Parasoft Virtualize Parasoft Virtualize, which is seamlessly integrated with Parasoft SOAtest, helps teams rapidly access any environment needed to develop, test, or validate an application. It dramatically reduces the time and cost of managing dev/test environments by emulating the behavior of dependent systems, which may be unavailable, evolving, or difficult-to-access. End-to-End Testing End-to-End Test Promotes a building-block approach for rapid development of test suites that exercise multiple Scenarios endpoints, which may span across the messaging layer, ESBs, the web interface, the database, and mainframes. This ensures the reliability of the underlying implementation. SOA-Aware Test Advanced test automation and an SOA-Aware interface enable fast construction of extensible tests. Construction Automatically generates tests from artifacts such as WSDL, WADL, UDDI, WSIL, XML, Schema, BPEL, HTTP traffic, and key industry platforms (see list on page 2). Web Interface Guides the team in developing robust, noiseless regression tests for rich and highly-dynamic web Validation interfaces—without scripts. Supports cross-browser testing, RIA/AJAX testing, and multi-level validation. Continuous Regression Continuous regression tests are applied across the multiple layers of heterogeneous systems. These tests Testing will immediately alert you when modifications impact application behavior—reducing the risk of change. Runtime Error Automatically exposes defects that occur as the application is exercised–including race conditions, Detection exceptions, resource & memory leaks, and security attack vulnerabilities. Pinpoints the root causes of application crashes, performance degradation, and unpredictable behavior. Event Tracing and Validation Message/Event Visualizes and traces how messages and events flow through ESBs, message brokers, applications, Monitoring databases, and more as tests execute—facilitating rapid diagnosis of problems directly from the test environment. Regression controls and validations can be applied at any point in the process. Test Flow Visualization Constructs a logical representation of the test execution sequence from SOAtest as well as remote systems under test. This aggregates all relevant information in a single location—with intuitive controls for zeroing in on the information needed to debug complex test scenarios (e.g., with many tests, multiple data sources, dynamic data, etc.). Load Testing Performance and Stress Existing functional tests are leveraged for load testing, removing key barriers to performance monitoring. Testing Monitors response rates as well as verifies whether functionality problems occur under load. Also supports non-Parasoft components such as JUnits or lightweight socket-based components. A SHEET T A Expected Quality of Defines and enforces expected QoS metrics that are important for setting and measuring SLAs during D Service Management development and QA. You can define success metrics before testing and set performance thresholds. "Regression performance tests" can run as part of the automated continuous testing process. Security Testing Penetration Testing Automatically generates tests to perform security penetration testing at the message layer and web interface. Covers parameter fuzzing, SQL injections, XPath injections, various XML issues, XSS, buffer overflow, command injection, unvalidated input, and more. Message Layer Security Enables execution of complex authentication, encryption, and access control test scenarios. Supports key Policy Validation transport and message-level standards (SSL, OAuth, Digest, Kerberos, WS-Security, etc.). Allows for token validation and negative testing to ensure proper enforcement of message integrity and authentication. Quality Governance Design and Ensures interoperability, security, and consistency across distributed systems—from application code Development Policy statements to business processes. Industry-standard and custom policies are enforced automatically and Enforcement continuously. Registry-Based Policy Automatically tests registered services and verifies compliance to the policies defined in the registry. Management Results are reported back to the registry—and updated in real-time—providing continuous visibility into a service's quality and compliance throughout its lifecycle. Platforms Technologies and Protocols AmberPoint HP-QC IBM/Rational Microsoft SOA / Web services Java .NET languages XML WSDL WADL UDDI WSIL SOAP Oracle/BEA Software AG/webMethods PoX (Plain XML) REST JSON BPEL Web Applications Mobile Web Interfaces RIA Progress Sonic Tibco AJAX JSP JavaScript HTML CSS WS-* Standards MTOM(XOP) / MIME / DIME Attachments OAuth TCP/IP webMethods Broker webMethods IS Hl7 FTP HTTP 1.0 Windows Linux Solaris Mac HTTP 1.1 HTTPS JMS IBM WebSphere MQ Sonic MQ RMI EJB SMTP Tibco Rendezvous .NET WCF (TCP, HTTP, WS Transaction Flow) ISO 8583 EDI custom/other Parasoft SOAtest Delivers Real Results Here are just a few examples of how leading organizations use Parasoft SOAtest… To ensure expected quality To audit business processes of service To ensure the reliability of To enforce SOA policies iPhone billing systems To validate complex To validate and load test business scenarios corporate tax eFiling systems To create and manage To validate role-based emulated service assets specimen management systems To validate performance To ensure the reliability and expectations performance of the world’s largest travel network (including Travelocity, American Airlines, and more) www.parasoft.com Parasoft Corporation, 101 E. Huntington Dr., 2nd Flr., Monrovia, CA 91016 Ph: (888) 305.0041, Fax: (626) 256.6884, Email: [email protected] Parasoft Helps Siemens Meet the Growing Demand for API Integrity Siemens is one of the world’s largest electrical engineering and electronics companies and holds leading market positions in all its business areas. Founded in 1847, Siemens has a strong international presence, with operations in over 190 countries and manufacturing facilities at about 290 locations worldwide. The company’s business portfolio is focused on six key areas: Information and Communications, Automation and Control, Power, Transportation, Medical, and Lighting. Siemens must be an agile firm to meet expectations for top quality — a fact that has encouraged the Siemens business unit IT Operations (ITO) to embrace service APIs . Whether ITO is serving internal or external customers, there’s a growing demand for high-value services that must be matched with leading approaches to software quality management. With that in mind, ITO’s enterprise application integration (EAI) team, which is responsible for integrating and maintaining critical IT applications, has deployed API testing with Parasoft SOAtest. Through an automated testing infrastructure, the team has been able to significantly increase the quality of its API services and ensure errors are eliminated at every level of software. Challenge: Confronting the Quality of Web Services Implementations As a global company, Siemens must support customers and employees throughout the world with an increasingly demanding set of IT services. As the expectations on Siemens’ ITO have grown, so have the demands on the teams responsible for ensuring IT systems and services perform at extremely high levels. With the constant introduction of new services, ITO must ensure that its applications are smartly integrated with back-end infrastructure and are diligently maintained to avoid software errors or system shutdowns. “We needed to increase the quality of the services exposed by our API,” explains Stefan Potzel, manager of the IT services organization’s EAI group based in Erlangen, Germany. “We needed an automated testing solution. Otherwise, you have to do everything manually to test services.” The team, which generates code in .NET, Perl and Java, recognized that an automated testing solution would facilitate the rollout, integration and maintenance of new applications. “It’s much easier for the developer to concentrate on the program than on the language structure. It makes it easier for the developer.” 1 Parasoft Helps Siemens Meet the Growing Demand for API Integrity The EAI team employs Microsoft’s BizTalk server as its process execution engine and relies on a portal as the channel for initiating business processes. Among other duties, Potzel’s shop is responsible for automating processes related to secure account creation for ITO’s customers