Automated testing of complex Web 2.0 applications prevents security vulnerabilities
So far there are no methods to test complex web 2.0 applications systematically and at low cost for malfunctions and security vulnerabilities. Therefore, computer scientists from Saarland University have developed a software system for checking complex web applications autonomously.
"The police have discovered a new variant of internet fraud. The offender capitalizes on the complexity of social networks", reported a newspaper a month ago in Southern Germany. Valentin Dallmeier, postdoc at the software engineering chair at Saarland University, is not surprised. He says that the methods that web developers and responsible project leaders rely on to try to find programming errors and security holes in web applications have been too ineffective and inefficient. "This is still done manually and therefore causes not only very high costs, but also high levels of risk for companies and the community," Martin Burger explains. He works at the software engineering chair, too. Together the two postdocs want to change this serious deficit. Therefore they have developed the software system "Webmate", which determines automatically why Web 2.0 applications fail.
For the transfer of the technology to a spin-off, they have just received 500,000 Euros from the national support program "EXIST" run by the Federal Ministry of Economics and Technology (BMWi). The program is aimed at improving the entrepreneurial environment at universities and research institutions and at increasing the number of technology- and knowledge-based business start-ups.
Dallmeier and Burger want to prevent such worst-case scenarios and other breakdowns. Businesses and their responsible web administrators will only have to type in their Web address. Afterwards the system discovers automatically how the different components of the application are connected to each other and via which menus, buttons, and other control panels the users are interacting with the application. Subsequently, it generates and executes test scenarios. If it discovers, for example, that the application is not compatible with a certain version of a browser, or a control panel no longer exists in a new version of the application, the system informs the developer immediately—likewise if a database is not connected, a server does not respond, or a link is dead. The web developer is able to repeat this test at any time.
Dallmeier, Burger and the three other persons planning to found the spin-off are sure that their technology will succeed. They estimate the market potential in Germany alone to be 120 million Euros annually.