Home > Ask the Software Quality Experts > Application Security Questions & Answers > Expert resolves issues plaguing OpenSTA users
Ask The Software Quality Expert: Questions & Answers
EMAIL THIS

Expert resolves issues plaguing OpenSTA users

John Overbaugh EXPERT RESPONSE FROM: John Overbaugh

Pose a Question
Other Software Quality Categories
Meet all Software Quality Experts
Become an Expert for this site


Software quality news and advice
Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google


>
QUESTION POSED ON: 14 July 2009
I am using OpenSTA to test a web application. Today, I recorded one scenario that creates a web link in my application and I parameterized that for different web links. Tomorrow the same script is not creating the web links but it is giving script ran successfully. Can you help, why it is happening?

>

No, I cannot tell you why this is happening, but I'm glad you asked! This is a great opportunity to talk a little bit about getting help with technical issues. The Internet is an incredible source of tools, especially open source tools like OpenSTA. It's also a great place to look for assistance from others. OpenSTA is not a commercial application, so obviously there's no support line to call. How can you get through an issue like this? It's actually pretty simple… Most of these open source tools have a wiki, a public forum or even an e-mail group. You can contact these groups and ask your question; they are usually quite responsive and the answer is generally accurate (because the people reading the group are familiar with the tool).

Next piece of advice: investigate everything you can by yourself, before asking for help. Troubleshooting begins with the application itself: does it show any errors in the user interface? What results does it show – are you getting 404 (server not found) errors? Are you getting 500 errors (application error)? Have you manually browsed to the site to make sure it's responsive? If none of these steps solve your problem, go to the next level – look for the test application's log and see if any errors are posting there. Since the tool performs web requests, run an HTTP traffic tool like NetMon or Charles, to see if any traffic is going out. Because you are testing a web application, I assume you have access to the server on which it resides. Check the server logs, check the application logs and see if errors are being thrown.

One of the most important pieces of advice I can give you is to record your troubleshooting. Have a pad of paper nearby, and write down what you did to investigate (in as much detail as you would need to follow the steps again).

If your own personal troubleshooting doesn't help you resolve the issue, your next step would be to turn to the groups I mentioned above. When you do this, don't ask vague questions. Be very specific—state the issue, explain what your configuration is like and give a general overview of the application under test. List in detail each step you have taken to troubleshoot (including any wiki or support articles you have read). You will gain the respect of group members and you are much more likely to get an answer.


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google



RELATED CONTENT
Software security testing tools
Beating software's cross-site scripting, authentication problems
Free tools for Agile testers
Put a stop to software espionage by watermarking source code
How to make your software tamperproof
How can I tell if my software security has been breached?
Lesser-known free software testing tools testers should try
Demo: Using WebGoat, a free software testing tool
Rich Internet applications security testing checklist
Finding cross-site scripting (XSS) application flaws checklist
Webgoat Tutorial

Application Security Strategies
Web server weaknesses you don't want to overlook
Rich Internet applications security testing checklist
The lowdown on PCI compliance
Web 2.0 application security troubleshooting, testing tutorial
Fixing four Web 2.0 input validation security mistakes
Social engineering training could disrupt botnet growth
Web security problems: Five ways to stop login weaknesses
Preparing for testing applications in the cloud
The role of quality assurance (QA) pros in software security
Common software security risks and oversights

Application Security
Beating software's cross-site scripting, authentication problems
What is fuzz testing? What are some ways to use fuzz testing?
How do I convince management to take application security seriously?
How do I set up a secure login page using membership in ASP.NET?
Security testing sales, marketing websites
Are there application security certification standards?
Top tools for testing Web application security
How to prevent HTTP response splitting
PCI DSS compliance: WAF, code review or both?
Application security careers have bright future

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
penetration testing  (SearchSoftwareQuality.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice



Software Quality - Software Maintenance, Software Requirements, Software Standards
About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2006 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts