Test 0) Testing Activities

Testing Activities

This section summarizes testing activities and test web services during the test phase of WSSAT. Test web services have been developed for testing activities. These services can be found under WSSAT/WebService2Test/ and WSSAT/WSAPI2Test/ directories.

1) XML Bombs Test

2) External Entity Attacks Test

3) Insecure Communication Test

4) Insufficient Authentication Test

5) Cross Site Scripting Test

6) SQL Injection Test

7) XPATH Injection Test

8) Verbose SOAP Fault Message Test

9) Weak WS-SecurityPolicy: Insecure Transport Test

10) Weak WS-SecurityPolicy: Insufficient Supporting Token Protection Test

11) Weak WS-SecurityPolicy: Tokens Not Protected Test

12) Weak XML Schema: Undefined Namespace Test

13) Weak XML Schema: Unbounded Occurrences Test