|
Mu’s IP Service Testing Solution helps engineering organizations that are delivering cloud and web services to rapidly generate test cases that thoroughly test the resilience aspects of the service. These services are often built using custom web based protocols and formats that are mostly unsupported by off-the-shelf test tools. Moreover, there are few tools specifically designed to test for resilience of these services.
Testers can now use the Mu Test Suite to generate tests based on their specific environment. Mu enables test creation from various types of input such as
- Customer content
- Mu provided content
- Community generated content
Once a basic set of test scenarios have been identified, the Mu solution auto-generates tens of thousands (to tens of millions) of tests that are designed to expose weaknesses in the implementation.
A key application of fuzz testing occurs when cloud operators are selecting new vendor equipment
for use in their future network planning. In
such situations, it is essential that a durable, impartial baseline be
established, especially around interoperability of the protocols they
intend to use within their network architectures. One of the best ways to accomplish this is via fuzzing, either based on open
protocol specifications or on service-specific traffic flows that must
be supported by the operational network. Mu's Protocol Fuzzing and Studio Zx modules
simplify the process of comparison since the results of many different
target devices can be examined side-by-side to see which is best able
to stand up to invalid or unexpected inputs around the traffic that
must be supported by the network.
The unique ability for Studio Zx to
support fuzzing even for proprietary protocols is unmatched in the test
industry. Cloud environments may be based on standards, but the protocol conversations are highly customized and specific to each cloud service, and there is no reason why the fuzzing should be limited to what the standards say is supposed to happen.
Another key component of resilience testing is Denial-of-Service simulation. The distributed Denial of Service (DoS) Simulation Module from Mu allows characterization of the effects on a service when stateless traffic is sent at user-specified rates. Any service will stop responding at some point due to resource exhaustion. This could occur due to a malicious attack or even due to inadvertent usage spikes in the service. It is often difficult for testers to proactively create these scenarios in the lab and profile the behavior of the service with accuracy. With IP Services, it becomes necessary for the tester to test for DoS scenarios, even at the application layer where one sees a high degree of customization.
Mu’s DoS module allows testers to create tests rapidly from a rich set of inputs:
- Using their own content
- Using community-supported content
- Using Mu-provided content
- Mu supplies dozens of predefined DoS templates
Mu’s DoS module lets testers precisely identify the characteristics of their IP Service in the face of a DoS scenario not only at the lowest network protocol level, but with custom or standard application level interactions as well.
|
