Saturday, March 14, 2009

WEB DESIGNING

Web Design Basics

Jennifer Kyrnin, About.com Guide to Web Design / HTML
web design uses all the same elements as print design. You need to explore the space and layout, handle fonts and colors, and put it all together in a format that puts your message across. These resources will help you learn Web design whether you are already a professional Web developer or just getting started in the Web arena.



Elements of Good Design
Good Web design is the same as good design. If you understand the elements that make up good design, you'll have a Web page that works well. These elements of good design apply whether you are writing a Web page, a business card, or a t-shirt and once you understand them you'll have the skills to be a great designer.


Fonts and Typography
Fonts are the way your text looks on a Web page. And most Web pages have large amounts of text. When you're thinking of design, you need to think about how the text looks on a micro-level (the font glyphs, what font family, etc.) as well as the macro-level (positioning blocks of text and adjusting the size and shape of the text). These resources explain how to work with fonts on Web pages.




How to Use Color
Color is everywhere. It's how we dress up our world and how we see things. Color has meaning beyond just "red" or "blue" and color is an important design element. These color resources teach how to use color effectively in Web design.



Graphics and Images
Graphics are the fun part of most Web pages. As the saying goes "a picture is worth 1,000 words" and that's also true in Web design. Learn how to get the most out of your Web images with the following links.
How to Add Images
Taking Great Photos for Web Sites
When to Use JPG or GIF Formats
Make Your Images Small
How to Protect Your Digital Images
Graphics Glossary
How to Build an Image Map
How to Choose Graphics Software
More Help with Graphics and Images


Web Layout Basics
When people think of Web design often what they mean is the layout. Layout is the organization of elements on a Web page. First you need to start with basic design principles. Once you understand them, you can move through how to place elements on your Web page. These links and resources will take you through the steps to learn good Web layout design.
How to Decide Where Your Elements Should go in the Layout
Once You've Decided the Placement, Learn the Basics of How to Lay Out Web Pages
Definition of White Space
What's the Difference Between Padding and Margins?
Fixed Width Layouts Versus Liquid Layouts
Use Real Text for Testing Page Layouts
Web Design Gallery - Layout Ideas
Layout Glossary
More About Web Layout




Tackling Web Navigation
Navigation is how your customers get around from one page to another on a Web site. Navigation provides movement and gives your customers the chance to find other elements of your site. You need to make sure that the structure of your Web site (the information architecture) makes sense so that your customers aren't forced to simply use search.
Designing Effective Web Navigation
Navigating Web Sites
Organization will Help Your Navigation
Link Rot: Are You a Culprit?
Web Pages Should Go Away
Adding Search to Your Web Site
What is Information Architecture?
Additional Web Navigation Resources




Accessibility and Usability
Accessibility and usability are often seen as a detriment to Web design, but a good designer focuses on making their site useful to as many people as possible. The links below take you through the basics of making an accessible site without compromising the design.
What is Accessibility?
What is Usability?
What do the Accessibility Guidelines Mean to Me?
How to Write Accessible Web Pages
Creating Color Blind Friendly Web Pages
Validating for Accessibility
Advanced Topics in Accessibility and Usability

Web Design Software
Most Web designers prefer to work in WYSIWYG or "What You See Is What You Get" editors because they provide a visual interface to the design. But finding the best Web design software is more than just WYSIWYG or not. Plus there are other tools you will need to build Web pages beyond just the Web editor.
Find the Right Web Design Software for You
Before You Buy a Web Design Editor
Myths and Facts About Modern WYSIWYG Editors
WYSIWYG Isn't Really
The Best WYSIWYG Editors for Windows
The Best WYSIWYG Editors for Macintosh
The Best Web Design Suites for Windows
The Best Web Design Suites for Macintosh
Dreamweaver Resources
Other Web Design Software Needs


RedTie
alexisc22


View (22202)
Comment (30)
Download (152,583)




C loudy Water Sports
boilers
View (13492)
Comment (19)
Download (86,685)



Simple Beauty
dboy
View (7090)
Comment (9)
Download (57,223)





Greeny blu
heartlessg
View (14754)
Comment (24)
Download (115,546)





Cash
alexisc22
View (11043)
Comment (18)
Download (89,754)



Sundark
rotw
View (7493)
Comment (9)
Download (63,957)
BlackandGreen
shipping_guy
View (4644)
Comment (10)
Download (43,285)





Touching
timmytima
View (11702)
Comment (9)
Download (70,129)



Web Design


Web design authoring resources and tips and my three-pronged Pitchfork Approach to Web authoring:



.choose a web site design standard for your pages like 'world wide accessibility' versus something less universal.
.test, test, test.. to make sure your design features degrade gracefully in diverse web browsing environments and screen configurations.
use commonly accepted good site design practices


Create Google XML sitemap online for free!


Designing For Multiple Browsers Without Being Bland
A concise, sober, and BRIEF description of a good Web authoring strategy. Other fine articles by the author include What You See is Not What Others Get and Widen Your Web Site's Audience. Stephen Traub.
Getting Started with HTML
A primer to Learning HTML 3.2 by Examples, this is a comprehensive and succinct guide to writing standard HTML.
Web Site Design Tips
Web site design tips for the beginner to the expert. A great collection of classic web site design tips that will build a strong foundation for any new web designer.
The Web Design Group Reference Section
Excellent background information and technical details on HTML authoring. Web Design Group.
Designing for The Web
A series of informative articles on Web site design, including A Web Site is a Harsh Mistress & Rules of Thumb. The special focus is on complementing Web design skills with competence in interface design. Don't miss Web Site Design. Diane Wilson.
Useit.com: Usable Information Technology
An expansive resource on usability and user interface issues -- featuring several extremely challenging and well-researched essays on Web design and style. Jakob Nielsen.
Understanding HTML
An outstanding presentation of HTML basics by an Australian with a fine writing style. Dianne Gorman.
Hints for Web Authors
A short yet insightful historical analysis of conventional vs. Web publishing, Hints for Web Authors is replete with solid recommendations on how to succeed with the latter, including a few pragmatic suggestions mixed in there for good measure, "...in hopes that others may find 'em useful." Warren Steel.
Dan's Web Tips
This huge resource contains a balanced summary review of most of today's important Web authoring topics. Daniel Tobias.
PHP Scripts
A good site we recommend for “PHP scripts” is ScriptsBank.com, it offers over 4000 interesting scripts.
HyperText Markup Language
World Wide Web Consortium (W3C) home page for HTML. Here you will find pointers to specifications for HTML, guidelines for how to use HTML to the best effect and pointers to related work at W3C. W3C.



Good Website Design Practices


These tips will help beginners to create highly functional and accessible Web pages. Some of the tips focus on writing valid HTML syntax while others focus on designing pages for "ease-of-use."



General Tips
Write your pages for multiple types of Web browsers--to provide trouble-free access to the widest possible audience. The World Wide Web is a multi-platform, non-browser specific medium. It should not matter whether people browse your Web pages using Netscape, Explorer, Opera, Lynx, WebTV, NetPhonic's Web-On-Call, Mobile Telephones, or Personal Digital Assistants (PDAs, or palmtops, the little computers with screens the size of a credit card). Each browser ought to render your informational Web pages without problems. If a Web page is designed properly, blind individuals, or anyone using text-to-voice or Braille displays, can easily listen to and review your work.
What You See Is Not What Others Get On The Web
Bobby
Run Web pages through a validator to test their compliance with common HTML (HyperText Markup Language) specifications. Modify pages until they validate, because compliant pages have a better chance of being rendered by various Web browsers, as the writer intends. However, if you intend something that is impractical with HTML, it will be no less impractical for being syntactically valid. Work with the strengths of HTML rather than trying to batter it into a WYSIWYG page design system. (WYSIWYG stands for What You See Is What You Get.)
Specifications for HTML
WDG HTML Validator
W3C HTML Validation Service
Condense textual content to fit the time and attention constraints of today's busy Web users.
Thoughts on Web Style
Inverted Pyramids in Cyberspace
Use small (byte-wise) graphics so graphics load more quickly in graphics-capable browsers. (It is not advisable to use GIFs for everything. It's of the first importance to make the right choice between JPEG and a palette-based format. Avoid blindly choosing GIF and then trying to rescue yourself from the resulting problems.)
JPEG Image Compression Frequently Asked Questions
When using graphics, provide textual alternatives for image-disabled or text-only Web browsers and indexing agents. Some people never turn images on.
Use of ALT Texts In IMGs
Test. Every visitor will see your pages differently. Test your pages with as many browsers and platforms as you can. For example, run pages through a browser like Lynx to see how the "text-only" world sees your documents. Note that search engines are, in effect, text-only browsers. Make documents Lynx-friendly. Try different preferences, color and font settings, and window sizes. Always check how pages look with higher/lower monitor brightness settings.
Lynx Viewer
Lynx-me
Lynx
For the future, to add presentational effects and Web page style, validate documents at the HTML 4.0 level (for the cleanest possible markup), so pages contain little or no HTML 3.2 presentational markup or proprietary stylistic hacks, and use the World Wide Web Consortium's Cascading Style Sheet (CSS) language to add stylistic effects to your pages.
W3C's HTML Home Page
Web Style Sheets
Spell check and proof-read your documents.
Free Website Spell checker
Establish a routine for locating and fixing broken internal and external Web site links.
Include contact information and a copyright notice.
Sign It!
If your Web site URL or email address will change occasionally, consider using a service that provides email forwarding and URL redirection.
Pobox
Persistent Uniform Resource Locator
Submit your Web site address to an appropriate newsgroup for a critical peer review.
Newsgroups
Promote your Web site by adding your Web address to search engine indices and subject directories. To ensure that people can easily find your Web site, it may be necessary to modify your pages to take best advantage of current search technologies.
Search Engine Watch
Special Tips
Be aware of the pitfalls of character sets. (Here comes a pound sign £ what did you get?) Currency signs are a real danger. It might be safer to write the currency in full. It is not just the signs that fail in some way; even those that do display may be misinterpreted. Let's say you are in the USA and write $25.00 without qualification. How much does that look like to a browser in Australia, Canada, or Hong Kong? If the local $ is worth more than the US$ then you risk someone dismissing a product as overpriced. If the local $ is less, your strangely eager customer may suddenly turn sour when she or he thinks you have been deliberately misleading.
ISO 8859-1 Character Set Overview
If you specify a background color or image, but don't specify text and link colors, the user's text and link colors will be used against your background. In some cases, there won't be contrast between the user's text and link colors and your background color or image, so your text and links will disappear. The rule of thumb is that if you set one color, then you need to set them all.
Acknowledgements
Critical feedback, editorial assistance, and numerous snippets provided by Alan J. Flavell, Sue Jordan and Susan Lesch.



Please email additions or describe why a resource listed here may contain misleading information. We will consider adding or removing....










Posted by at No comments:

CORE JAVA

The Core Java technologies and application programming interfaces (APIs) are the foundation of the Java Platform, Standard Edition (Java SE). They are used in all classes of Java programming, from desktop applications to Java EE applications. See the other tabs above for information on other technologies included in Java SE.


Tip: Experienced Java programmers can quickly get to a component's documentation: Locate and click the technology in the documentation diagram. Documentation packages for previous releases are also available: J2SE 1.3.1, J2SE 1.4.2, J2SE 5.0.














Java DB
Java DB is Sun's supported distribution of the open source Apache Derby database. Its ease of use, standards compliance, full feature set, and small footprint make it the ideal database for Java developers. Java DB is written in the Java programming language, providing "write once, run anywhere" portability. It can be embedded in Java applications, requiring zero administration by the developer or user. It can also be used in client server mode. Java DB is fully transactional and provides a standard SQL interface as well as a JDBC 4.0 compliant driver.


Java Data Objects (JDO)
The Java Data Objects (JDO) API is a standard interface-based Java model abstraction of persistence. Application programmers can use JDO technology to directly store Java domain model instances into the persistent store (database). Benefits include ease of programming, application portability, database independence, high performance, and optional integration with Enterprise JavaBeans (EJB). JDO has been developed under Java Specification Request 12 (JSR 12) and Java Specification Request 243 (JSR 243). Beginning with JDO 2.0, the development of the API and the Technology Compatibility Kit (TCK) takes place within the Apache JDO open-source project.


The Java Database Connectivity (JDBC)
The Java Database Connectivity (JDBC) API is the industry standard for database-independent connectivity between the Java programming language and a wide range of databases – SQL databases and other tabular data sources, such as spreadsheets or flat files. The JDBC API provides a call-level API for SQL-based database access.


JDBC technology allows you to use the Java programming language to exploit "Write Once, Run Anywhere" capabilities for applications that require access to enterprise data. With a JDBC technology-enabled driver, you can connect all corporate data even in a heterogeneous environment.
JDBC documentation: J2SE 1.4.2 | J2SE 5.0 | Java SE 6
See Also:
JDBC Overview
Industry Support
JDBC Drivers
FAQ
Articles
Books
Forums
Learning JDBC
Sample Code


Java SE Desktop Overview

Desktop Java technologies can be used to create rich client applications and applets that are fast, secure, and portable. This page introduces all of these technologies.Most of the technologies are included as part of Java SE (also known as the JRE, or Java Runtime Environment), which is pre-installed on over 90% of all desktop systems on a wide range of operating systems. Other Desktop Java technologies are available as either separate downloadable Java extensions, or as open source projects on java.net. Finally, the Netbeans IDE with its integrated GUI builder brings everything together, allowing you to easily build your desktop application.

Community
Please visit the JavaDesktop.org community on java.net for the latest news and information for developers of client applications.
JavaDesktop Forums on java.net: This is our prime spot for discussing all things desktop. It mixes Q&A with advanced developer discussions, such as the direction and future of Java on the desktop. Many of the Desktop Java engineers at Sun participate on these forums.
Java Forums on the Sun Developer Network (SDN): More of a Q&A forum, this is a great resource for both beginning and advanced developers.


Technology Overview
Java Web Start / JNLP

Java Web Start software provides a flexible and robust deployment solution for Java technology-based applications based on the Java Community Process program (JCP). The technology is being developed through the JCP program as JSR-56: The Java Network Launching Protocol & API (JNLP), which provides a browser-independent architecture for deploying Java 2 technology-based applications to the client desktop. Read More


Included in the Java SE platform


Java Plug-in technology, included as part of the Java 2 Runtime Environment, Standard Edition (JRE), establishes a connection between popular browsers and the Java platform. This connection enables applets on Web sites to be run within a browser on the desktop.


Included in the Java SE platform


SwingThe Swing API provides a comprehensive set of GUI (Graphical User Interface) components and services which enables the development of commercial-quality desktop and Internet/Intranet applications. Swing is built on top of many of the other Desktop Java technologies found on this page, including JavaBeans, AWT, Java2D, Accessibility, and Internationalization. A great place to jump into Swing programming is The Swing Tutorial


Included in the Java SE platform


The Java 2D API is a set of classes for advanced 2D graphics and imaging, encompassing line art, text, and images in a single comprehensive model. The API provides extensive support for image compositing and alpha channel images, a set of classes to provide accurate color space definition and conversion, and a rich set of display-oriented imaging operators.


Included in the Java SE platform


Java 3D™ API provides a set of object-oriented interfaces that support a simple, high-level programming model you can use to build, render, and control the behavior of 3D objects and visual environments. With the Java 3D API, you can incorporate high-quality, scalable, platform-independent 3D graphics into applications and applets based on Java technology.



CORE JAVA CODE



Program 1
//Find Maximum of 2 nos.
class Maxof2{
public static void main(String args[]){
//taking value as command line argument.
//Converting String format to Integer value
int i = Integer.parseInt(args[0]);
int j = Integer.parseInt(args[1]);
if(i > j)
System.out.println(i+" is greater than "+j);
else
System.out.println(j+" is greater than "+i);
}
}
Program 2
//Find Minimum of 2 nos. using conditional operator
class Minof2{
public static void main(String args[]){
//taking value as command line argument.
//Converting String format to Integer value
int i = Integer.parseInt(args[0]);
int j = Integer.parseInt(args[1]);
int result = (iProgram 3
/* Write a program that will read a float type value from the keyboard and print the following output.
->Small Integer not less than the number.
->Given Number.
->Largest Integer not greater than the number.
*/
class ValueFormat{
public static void main(String args[]){
double i = 34.32; //given number
System.out.println("Small Integer not greater than the number : "+Math.ceil(i));
System.out.println("Given Number : "+i);
System.out.println("Largest Integer not greater than the number : "+Math.floor(i));
}
Program 4
/*Write a program to generate 5 Random nos. between 1 to 100, and it
should not follow with decimal point.
*/
class RandomDemo{
public static void main(String args[]){
for(int i=1;i<=5;i++){ System.out.println((int)(Math.random()*100)); } } } Program 5
/* Write a program to display a greet message according to
Marks obtained by student.
*/
class SwitchDemo{
public static void main(String args[]){
int marks = Integer.parseInt(args[0]); //take marks as command line argument.
switch(marks/10){
case 10:
case 9:
case 8:
System.out.println("Excellent");
break;
case 7:
System.out.println("Very Good");
break;
case 6:
System.out.println("Good");
break;
case 5:
System.out.println("Work Hard");
break;
case 4:
System.out.println("Poor");
break;
case 3:
case 2:
case 1:
case 0:
System.out.println("Very Poor");
break;
default:
System.out.println("Invalid value Entered");
}
}
}
Program 6
/*Write a program to find SUM AND PRODUCT of a given Digit. */
class Sum_Product_ofDigit{
public static void main(String args[]){
int num = Integer.parseInt(args[0]); //taking value as command line argument.
int temp = num,result=0;
//Logic for sum of digit
while(temp>0){
result = result + temp;
temp--;
}
System.out.println("Sum of Digit for "+num+" is : "+result);
//Logic for product of digit
temp = num;
result = 1;
while(temp > 0){
result = result * temp;
temp--;
}
System.out.println("Product of Digit for "+num+" is : "+result);
}
}
Program 7
/*Write a program to Find Factorial of Given no. */
class Factorial{
public static void main(String args[]){
int num = Integer.parseInt(args[0]); //take argument as command line
int result = 1;
while(num>0){
result = result * num;
num--;
}
System.out.println("Factorial of Given no. is : "+result);
}
}
Program 8
/*Write a program to Reverse a given no. */
class Reverse{
public static void main(String args[]){
int num = Integer.parseInt(args[0]); //take argument as command line
int remainder, result=0;
while(num>0){
remainder = num%10;
result = result * 10 + remainder;
num = num/10;
}
System.out.println("Reverse number is : "+result);
}
}
Program 9
/*Write a program to find Fibonacci series of a given no.
Example :
Input - 8
Output - 1 1 2 3 5 8 13 21
*/
class Fibonacci{
public static void main(String args[]){
int num = Integer.parseInt(args[0]); //taking no. as command line argument.
System.out.println("*****Fibonacci Series*****");
int f1, f2=0, f3=1;
for(int i=1;i<=num;i++){ System.out.print(" "+f3+" "); f1 = f2; f2 = f3; f3 = f1 + f2; } } } Program 10
/* Write a program to find sum of all integers greater than 100 and
less than 200 that are divisible by 7 */
class SumOfDigit{
public static void main(String args[]){
int result=0;
for(int i=100;i<=200;i++){ if(i%7==0) result+=i; } System.out.println("Output of Program is : "+result); } }






Posted by at No comments:

System Programming


Computer Programming and Information Systems - BS


What is the Bachelor of Science in Computer Programming and Information Systems?



Demand continues to be strong for students skilled in Information Technology. Of the top 10 degrees in demand for bachelor’s degree levels, four are computer related. They include the following degrees: Computer Science, Information Science and Systems, Computer Engineering and Management Information Systems/Business Data Processing.
The Computer Programming and Information Systems baccalaureate degree program requires a set of core courses that all graduates must take. The Core courses provide the diverse but fundamental foundation in technology necessary to create a technology savvy individual. In addition, the student selects one of four tracks with concentrations in Programming, Systems Development, Networking or Web Development. Each track offers the student a skill set in one discipline of Information Technology and enables him/her to study a particular area in depth.
This program touches on all aspects of computer programming and information systems. It provides a practical hands-on approach to programming with an emphasis on solving business problems.



Program of Study
Liberal Arts and Sciences (61-63 credits)
EGL 101 – Composition: Rhetoric.................................... 3
EGL 102 – Composition: Literature.................................. 3
EGL 310 – Technical Writing............................................. 3
SPE 330/331 – Advanced Oral Communication .......... 3
Arts core (from Arts and Science) .................................. 3
Modern Language (level II)............................................... 3
ECO 156 or ECO 157........................................................... 3
PSY 101 or SOC 122.......................................................... 3
American History Core....................................................... 3
HIS 126 – The West & the World..................................... 3
Natural Science electives................................................6/8
MTH 130 Calculus I w Applications................................. 4
MTH 390 Prob. Methods in Operations Research........ 3
300 level Arts & Science electives................................... 9
Free Arts and Science electives........................................ 9
Note: 18 credits from this group must be 300-level or higher
Required: Business & Computer Systems (48 credits)
BCS 101 – Programming Concepts and Problem Solving.................................................................. 3
BCS 1xx – Programming I * BCS120 or BCS185......... 3
BCS 2xx – Programming II * BCS230 or BCS285....... 3
BCS 215 - UNIX Operating System................................. 3
BCS 260 – Data Base......................................................... 3
BCS 262 – Data Communications................................... 3
BCS 300 – Management Information Systems............ 3
BCS 301 – Systems Analysis and Design...................... 3
BCS 345 – Java Programming......................................... 3
BCS 430 – Senior Project.................................................. 3
BCS ___ Elective................................................................ 3
BCS/BUS___ Elective ....................................................... 3
BCS 3XX – 300-level elective or above........................... 3
BCS/BUS 3XX – 300-level elective or above.................. 3
BUS 101 – Accounting I..................................................... 3
BUS 109 – Management Theories and Practices......... 3
Programming Track (12 Credits)
Students must complete BCS120 and BCS230 for this track
BCS 370 – Data Structures............................................... 3
BCS 316 – Perl Programming.......................................... 3
BCS 360 – Advanced Data Base...................................... 3
BCS 410 – Computer Architecture................................... 3
Systems Track (12 Credits)
Students must complete BCS 301 as a prerequisite(s) for this track
BCS 302 – Systems Analysis and Design II................... 3
BCS 378 – Information Security...................................... 3
BUS 3XX – 300-level elective or above........................... 3
BCS 405 - Development Project Management



Program of Study
Liberal Arts and Sciences (61-63 credits)
EGL 101 – Composition: Rhetoric.................................... 3
EGL 102 – Composition: Literature.................................. 3
EGL 310 – Technical Writing............................................. 3
SPE 330/331 – Advanced Oral Communication .......... 3
Arts core (from Arts and Science) .................................. 3
Modern Language (level II)............................................... 3
ECO 156 or ECO 157........................................................... 3
PSY 101 or SOC 122.......................................................... 3
American History Core....................................................... 3
HIS 126 – The West & the World..................................... 3
Natural Science electives................................................6/8
MTH 130 Calculus I w Applications................................. 4
MTH 390 Prob. Methods in Operations Research........ 3
300 level Arts & Science electives................................... 9
Free Arts and Science electives........................................ 9
Note: 18 credits from this group must be 300-level or higher
Required: Business & Computer Systems (48 credits)
BCS 101 – Programming Concepts and Problem Solving.................................................................. 3
BCS 1xx – Programming I * BCS120 or BCS185......... 3
BCS 2xx – Programming II * BCS230 or BCS285....... 3
BCS 215 - UNIX Operating System................................. 3
BCS 260 – Data Base......................................................... 3
BCS 262 – Data Communications................................... 3
BCS 300 – Management Information Systems............ 3
BCS 301 – Systems Analysis and Design...................... 3
BCS 345 – Java Programming......................................... 3
BCS 430 – Senior Project.................................................. 3
BCS ___ Elective................................................................ 3
BCS/BUS___ Elective ....................................................... 3
BCS 3XX – 300-level elective or above........................... 3
BCS/BUS 3XX – 300-level elective or above.................. 3
BUS 101 – Accounting I..................................................... 3
BUS 109 – Management Theories and Practices......... 3
Programming Track (12 Credits)
Students must complete BCS120 and BCS230 for this track
BCS 370 – Data Structures............................................... 3
BCS 316 – Perl Programming.......................................... 3
BCS 360 – Advanced Data Base...................................... 3
BCS 410 – Computer Architecture................................... 3
Systems Track (12 Credits)
Students must complete BCS 301 as a prerequisite(s) for this track
BCS 302 – Systems Analysis and Design II................... 3
BCS 378 – Information Security...................................... 3
BUS 3XX – 300-level elective or above........................... 3
BCS 405 - Development Project Management


Posted by at No comments:

Network Administration

Network Administrator


A Network Administrator is a professional in charge of the maintenance of the computer hardware and software systems that make up a computer network. This includes activities such as the deployment, configuration, maintenance and monitoring of active network equipment.
The Network Administrator is typically a mid to senior level of technical/network staff in an organization and is not typically involved with direct user support. The Network Administrator will concentrate on the overall health of the network, server deployment, security, ensuring network connectivity throughout and company's LAN/WAN infrastructure, and all other technical considerations at the network level of an organizations technical hierarchy. Network Administrators are considered Tier 3 support personnel that only work on break/fix issues that could not be resolved at the Tier1 (helpdesk) or Tier 2 (desktop/network technician) levels.
In some companies, the Network Administrator may also design and deploy networks. Usually, though, these tasks would be assigned to a Network Engineer if the company is large enough.
The actual role of the Network Administrator will vary from company to company, but usually includes tasks such as network address assignment, assignment of routing protocols and routing table configuration as well as configuration of authentication and authorization – directory services. It often includes maintenance of network facilities in individual machines, such as drivers and settings of personal computers as well as printers and such. It sometimes also includes maintenance of certain network servers: file servers, VPN gateways, intrusion detection systems, etc.
Training and certifications for Network Administrators:
Cisco CCNA
Cisco CCIP
Cisco CCNP
Cisco CCIE
Companies that hire Network Administrators:
Cisco
Shared Technologies
eBay
Intuit
Apple
US Government
Rackspace
Amazon
NetApp
Qualcomm
Related Job Profiles:
Network Engineer
System Administrator
Network Administrator - Related Links:
Network Engineer Resume Sample
Enterprise Networks and Servers - a publication for the networking industry.
Network Computing - a publication with broad networking industry coverage.
Network Administrator - Also of Interest
Best Places to WorkSalary CalculatorsHighest Paying Certifications
Network Administrator - Further Reading
Cisco CertificationsJob InterviewsInformation Security
Network Administrator - Job Searching
Job Search SitesTechnical ResumesCover Letter Writing
Related Articles
Resume Sample - Network Engineer - Sample Resume for Experienced Network En...
Careers in Networking - Career Advice Tips Ideas Information
Marine Corps Enlisted Job Descriptions -- 0658 -- Tactical Data Network Gat...
Network Engineer - Profile of Network Engineer - Career as a Network Engine...
NOS (Network operating system) - What is NOS (Network operating system)
Posted by at No comments:

DBA and Datawarehousing






An Introduction to Oracle Warehouse Builder 10g

by Mark Rittman


Zhilst many Oracle DBAs build and maintain their data warehouses using nothing more than UNIX, SQL, and PL/SQL scripts, many are now starting to use graphical tools such as Oracle Warehouse Builder 10g (OWB) to help with development. What do tools such as OWB10g offer the DBA, and how can they help with the warehouse design and build?


Introduction
The Oracle database has many features that make it well suited to data warehousing, including support for very large databases, automated summary management, and an embedded multidimensional OLAP engine. Recent versions of Oracle have come with built-in extraction, transformation, and load (ETL) features, and it is possible to build an Oracle data warehouse using just these features, and SQL*Plus.


DBAs will, however, probably be aware that a number of vendors, including Oracle, offer tools and applications that are designed to assist with the design, build, and load of data warehouses — a type of application known as an ETL tool, with Oracle Oracle’s own offering being Oracle Warehouse Builder 10g. So, what does Oracle Warehouse Builder offer the Oracle DBA, and how can it help with the warehouse project lifecycle?


Product Architecture
Oracle Warehouse Builder is a GUI tool used for building Oracle data warehouses and data marts. Written in Java and currently now at version 10, versions are generally provided for Microsoft Windows, Intel Linux, and Solaris/HP-UX/AIX/Tru-64. OWB is licensed as part of the 10g Developer Suite, though as versions are generally released more frequently than updates to 10gDS, it’s best to check on the OTN download site to obtain the latest version.


OWB10g consists of two main components: the design environment, which is concerned with working with metadata (abstract representations of warehouse objects, together with business rules), and the runtime environment, which takes this metadata and turns it into physical database objects and process flows.




The design environment consists of the OWB client and a number of utility programs used for setting up the runtime environment, reporting on the repository, and providing a command-line interface for OWB.



All of the client tools work against metadata in the OWB repository, which is usually installed in its own schema on a development server. OWB comes with a Web-based reporting environment, which uses a desktop installation of OC4J to provide reports against the metadata in the repository.
Once the DBA has built the logical model in the repository, he needs to translate it into a physical design using the OWB Runtime component. This runtime component creates physical database objects, together with scripts and packages to extract data from source system, and populate the warehouse objects. OWB10g can extract data from any database that has either an ODBC driver, or an Oracle Gateway, together with flat files and data held in SAP. In addition, customers who license the business intelligence functionality for Oracle Applications are provided with a customized version of OWB, for extraction of applications data using business terms.


Graphical Object Definition
OWB10g allows you to create source modules that import data from flat files, relational databases, or SAP. When deployed, these import routines consist of SQL*Loader scripts, external table definitions, database links through to Oracle databases and databases accessed through Generic Connectivity or Oracle Gateways, and ABAP programs for extracting data out of SAP. Import definitions are defined using the OWB client graphical user interface, saved to the metadata repository, and generated using the OWB runtime component.



These OWB source modules are then used later on in the process as the start point for data transformations, which eventually go on to load the warehouse itself. As such, although a graphical user interface is used to define these sources, an experienced DBA or developer familiar with SQL*Loader syntax or Oracle DDL could probably hand-code the equivalent scripts in a shorter amount of time, as could an ABAP programmer working in a SAP environment. However, by creating source definitions within the OWB client, the definitions of these sources are captured within the central repository, providing a form of documentation as well as a way of automatically reconciling these definitions with possible changes in the underlying source data. Likewise, OWB provides a graphical interface for building warehouse objects, either as regular Oracle tables or with the additional ROLAP metadata available with the Enterprise Edition of Oracle 8i, 9i, and 10g.
Source-to-Target Data Mappings
Although a GUI interface for defining warehouse objects is welcome, the big productivity gain is through the mapping and transformation capability within OWB10g. OWB allows the DBA to define a mapping canvas that has one or more data sources and targets, with data being processed through SQL transformations or PL/SQL functions.
The palette on the right-hand side of the mapping allows you to drop tables, views, external tables, flat files, and materialized views onto the mapping canvas; draw data mappings between the objects; and apply a range of SQL and PL/SQL transformations to the data, including the ability to use pipelined table functions. As part of the OWB10g package, a number of additional PL/SQL transformations are provided, including a name-and-address cleansing feature that matches addresses in the warehouse with third-party name and address files, a “match-merge” feature, PL/SQL transformations that utilize the XML Toolkit, and ones used for loading data into analytic workspaces
How Efficient is the Generated Code?
ETL tools such as OWB10g usually work by generating program code that is then executed to deploy and load the warehouse. A common DBA concern about such an approach is that the generated code may not as efficient, or optimized, as code that the DBA writes himself. So what does OWB10g-generated code look like?
Firstly, it’s worth understanding that as Oracle has chosen to only support the enterprise editions of Oracle 8i, 9i, and 10g as deployment platforms, the code that is generated is Oracle SQL and PL/SQL, and leverages the data warehousing features of the Oracle database. For example, when deploying table definitions, all options such as parallel access mode, partitioning, logging mode, and so on, are available to use, and the default way to build warehouse objects is to use the ROLAP functionality (dimensions, facts, hierarchies, and so on) that comes with the enterprise edition. When deploying data mappings, OWB first tries to generate the mapping as a set-based SQL update, only falling back to a cursor-based PL/SQL update if a single SQL statement cannot be used. For a regular SQL update, the only code that OWB adds to the base SQL statement is a PL/SQL wrapper that runs the code within a package and logs the mapping results to a set of audit tables.
To take an example, a simple mapping that inserts or updates a dimension table from an external table would be built using the following OWB data mapping:
If we were writing this manually and deploying to an Oracle9i or 10g database, we would use the MERGE command to merge into the underlying CHANNEL table by selecting from the CHANNELS_EXT external table, and, if possible, use parallelism and direct path inserts. Looking at the code generated by OWB, this is indeed the approach that the tool takes:


CREATE OR REPLACE PACKAGE "MAP_CHANNEL" ASsql_stmt VARCHAR2(32767);get_abort BOOLEAN := FALSE;get_trigger_success BOOLEAN := TRUE;get_errors NUMBER(22) := 0;get_status NUMBER(22) := 0;-- Status variable for Batch cursors"CHANNEL_St" BOOLEAN;-- Function Main -- Entry point in package "MAP_CHANNEL"FUNCTION Main RETURN NUMBER; END "MAP_CHANNEL";/CREATE OR REPLACE PACKAGE BODY "MAP_CHANNEL" AS------------------------------------------------------------------------- Function "CHANNEL_Bat"-- performs batch extraction-- Returns TRUE on success-- Returns FALSE on failure------------------------------------------------------------------------FUNCTION "CHANNEL_Bat" RETURN BOOLEAN ISBEGIN EXECUTE IMMEDIATE 'ALTER SESSION ENABLE PARALLEL DML'; BEGIN MERGE /*+ APPEND PARALLEL(CHANNEL, DEFAULT, DEFAULT) */ INTO "CHANNEL" USING (SELECT "CHANNELS_EXT"."CHANNEL_CLASS" "CHANNEL_CLASS", "CHANNELS_EXT"."CHANNEL_DESC" "CHANNEL_DESC", "CHANNELS_EXT"."CHANNEL_ID" "CHANNEL_ID" FROM "CHANNELS_EXT" "CHANNELS_EXT" ) "MERGEQUERY_186" ON ( "CHANNEL"."CNL_ID" = "MERGEQUERY_186"."CHANNEL_ID" ) WHEN NOT MATCHED THEN INSERT ("CHANNEL"."CLS_CLASS_NAME", "CHANNEL"."CNL_NAME", "CHANNEL"."CNL_ID") VALUES ("MERGEQUERY_186"."CHANNEL_CLASS", "MERGEQUERY_186"."CHANNEL_DESC", "MERGEQUERY_186"."CHANNEL_ID") WHEN MATCHED THEN UPDATE SET "CLS_CLASS_NAME" = "MERGEQUERY_186"."CHANNEL_CLASS", "CNL_NAME" = "MERGEQUERY_186"."CHANNEL_DESC"; COMMIT; EXCEPTION WHEN OTHERS THEN ROLLBACK; COMMIT; RETURN FALSE; END; COMMIT; RETURN TRUE; END "CHANNEL_Bat"; FUNCTION Main RETURN NUMBER IS get_batch_status BOOLEAN := TRUE; BEGIN -- Initialize all batch status variables "CHANNEL_St" := FALSE; "CHANNEL_St" := "CHANNEL_Bat"; RETURN get_status; END Main; END "MAP_CHANNEL"; /





Posted by at No comments:

E Commerce

Introduction To E-Commerce
Daniel F. Duran




Traditional Commerce and Electronic Commerce
Electronic commerce refers to business activities conducted using electronic data transmission via the Internet and the World Wide Web.



.The main elements of e-commerce are:
.Consumer-to-consumer
.Business-to-consumer
.Business-to-business
.Business-to-government
.The transactions and business processes that support selling and purchasing activities on the Web




.To many people, the term electronic commerce means shopping on the part of the Internet called the World Wide Web.



.Although consumer shopping on the Web was running about $50 billion per year in 2001 and is expected to exceed $350 billion by 2004, electronic commerce is much broader and encompasses many more business activities than just Web shopping.




Electronic Commerce



.Electronic Funds Transfers (EFTs) have been used by banks for many years.
n
.Electronic Data Interchange (EDI) occurs when one business transmits computer-readable data in a standard format to another business.




Electronic Data Interchange (EDI)



the standards based (ASC X12 and UN/EDIFACT) application to application transfer of business documents between computers and business partners




Electronic Commerce



Businesses who engage in EDI with each other are called trading partners.



.The standard formats used in EDI contain the same information that businesses have always included in their standard paper invoices, purchase orders, and shipping documents.



.Firms, such as General Electric and Wal-Mart, have been pioneers in using EDI to improve their purchasing process




EDI Delivery Systems



.VAN - Value Added Network
.a third-party entity facilitates the electronic exchange of information and payments between subscribers and their trading partners.


.Over 90% of Fortune 1,000 firms use EDI
.But only 5% of smaller firms do
.very secure - very mature
.often criticized as costly and technical
.the Internet - Web Based Communications System
.standards still being defined –
.has the potential to dramatically reduced costs
.noffers the opportunity to eliminate the third party intermediary.




Activities as Business Processes



.Business processes refer to the group of logical, related, and sequential activities and transactions in which businesses engage, including:
.Transferring funds
.Placing orders
.Sending invoices
.Shipping goods to customers




Advantages of Electronic Commerce


. Electronic commerce can increase sales and decrease costs.
. Web advertising reaches a large amount of potential customers throughout the world.
. The Web creates virtual communities for specific products or services.


. A business can reduce its costs by using electronic commerce in its sales support and order-taking processes.


. Electronic commerce increases sale opportunities for the seller.
. Electronic commerce increases purchasing opportunities for the buyer.


. Some business processes are difficult to be implemented through electronic commerce.
nReturn-on-investment is difficult to apply to electronic commerce.
. Businesses face cultural and legal obstacles to conducting electronic commerce.


International Electronic Commerce



. About 60 percent of all electronic commerce sites are in English, therefore many language barriers need to be overcome.
.The political structures of the world present some challenges.


. Legal, tax, and privacy are concerns of international electronic commerce.


The Role of Electronic Commerce

. Businesses and individuals can use electronic commerce to reduce transaction costs.


. Network economic structure – companies coordinate their strategies, resources, and skill sets by forming long-term, stable relationships with other companies and individuals based on shared purposes.









Posted by at No comments:

Testing Tool

Software Testing Information


One Stop Testing has been developed to give all the information on Software Testing in one place. This site contains the information on the following:


This section covers - Static Testing, Static material Testing, Static Testing Machine, Static Materials Testing, Software Testing Static Analysis, Static Control Testing, Static Testing Techniques, Static Pressure Testing.


Dynamic Testing:
This section covers - Dynamic Tribology Oscillation Testing, Dynamic Testing, Dynamic Testing Machine, Dynamic Material & Tear, Wall, Load Testing.


Blackbox Testing:
This section covers - What is blackbox testing, difference between blackbox testing and whitebox testing, Blackbox Testing plans, unbiased blackbox testing.


Whitebox Testing:
This section has notes on Whitebox Testing (QA).


Unit Testing:
This section covers - Software Unit Testing, tools, research topics, toolkits, extreme programming unit testing.


Requirements Testing:
This section covers - (half face) Respirator fit testing requirements, GFCI, NCLEX testing requirements, CNA testing in Georgia Requirements.


Regression Testing:
Software Regression Testing, Network Regression Testing (Software), Automated Regression Testing, Dod regression standard testing, Regression Testing Tools, Web Regression Testing.










Web Site Test Tools and Site Management Tools
More than 420 tools listed in 12 categories


Organization of Web Test Tools Listing - this tools listing has been loosely organized into the following categories:
Load and Performance Test

Tools




Validators and Link CheckersPERL and C Programs for

Validating and Checking
Web Functional/Regression




Note: Categories are not well-defined and some tools could have been listed in several categories; the 'Web Site Management Tools' category includes products that contain: site version control tools, combined utilities/tools, server management and optimization tools, and authoring/publishing/deployment tools that include significant site management or testing capabilities. Suggestions for category improvement are welcome; see bottom of this page to send suggestions.


Check listed tool/vendor sites for latest product capabilities, supported platforms/servers/clients, etc; new listings are periodically added to the top of each category section; date of latest update is shown at bottom of this page.


Also see How can World Wide Web sites be tested? in the FAQ Part 2 for a discussion of web site testing considerations; also see What's the best way to choose a test automation tool? in the LFAQ section; there are also articles about web site testing and management in the 'Resources' section.

Load and Performance Test Tools


BrowserMob - On-demand, self-service, low-cost, pay-as-you-go service enables simulation of large volumes of real browsers hitting a website. Utilizes Amazon Web Services, Selenium. Uses real browsers for each virtual user so that traffic is realistic, AJAX & Flash support is automatic. Browser screen shots of errors included in reports.


Load Impact - Online load testing service from Gatorhole/loadimpact.com for load- and stress- testing of your website over the Internet; access to our distributed network of load generator nodes - server clusters with very fast connections to enable simulation of tens of thousands of users accessing your website concurrently. Free low level load tests for 1-50 simulated users; higher levels have monthly fees.


Pylot - Open source tool by Corey Goldberg for generating concurrent http loads. Define test cases in an XML file - specify requests - url, method, body/payload, etc - and verifications. Verification is by matching content to regular expressions and with HTTP status codes. HTTP and HTTPS (SSL) support. Monitor and execute test suites from GUI (wxPython), and adjust load, number of agents, request intervals, rampup time, test duration. Real-time stats and error reporting are displayed.


AppLoader - Load testing app from NRG Global for web and other applications accessible from a Windows desktop; generates load from the end user's perspective. Protocol independent and supports a wide variety of enterprise class applications. Integrates with their Chroniker monitoring suite so results of load testing can be correlated with system behavior as load is increased. Runs from Win platforms.


fwptt - Open source tool by Bogdan Damian for load testing web applications. Capabilities include handling of Ajax. Generates tests in C#. For Windows platforms


JCrawler - An open-source stress-testing tool for web apps; includes crawling/exploratory features. User can give JCrawler a set of starting URLs and it will begin crawling from that point onwards, going through any URLs it can find on its way and generating load on the web application. Load parameters (hits/sec) are configurable via central XML file; fires up as many threads as needed to keep load constant; includes self-testing unit tests. Handles http redirects and cookies; platform independent.


vPerformer - Performance and load testing tool from Verisium Inc. to assess the performance and scalability of web apps. Use recorded scripts or customized scripts using Javascript. Targeted platforms: Windows


Curl-Loader - Open-source tool written in 'C', simulating application load and behavior of tens of thousand HTTP/HTTPS and FTP/FTPS clients, each with its own source IP-address. In contrast to other tools curl-loader is using real C-written client protocol stacks, namely, HTTP and FTP stacks of libcurl and TLS/SSL of openssl. Activities of each virtual client are logged and collected statistics include information about: resolving, connection establishment, sending of requests, receiving responses, headers and data received/sent, errors from network, TLS/SSL and application (HTTP, FTP) level events and errors.


RealityLoad XF On-Demand Load Testing - An on-demand load testing service (no licenses) from Gomez.com. Leverages Gomez' peer panel, which consists of over 15,000 end-user desktop testing locations distributed across the world, to provide distributed load tests that accurately reproduce the network and latency characteristics encountered by real users in a live environment.


OpNet LoadScaler - Load test tool from OpNet Technologies Inc. Create tests without programming; generate loads against web applications, and other services including Web Services, FTP, and Email. Record end-user browser activity in the OPNET TestCreatorTM authoring environment to automatically generate test scripts in industry-standard JavaScript. Modify, extend and debug tests with the included JavaScript editor. Alternatively, drag and drop icons onto the test script tree. No knowledge of a scripting language is required to customize test scripts.


StressTester - Enterprise load and performance testing tool for web applications from Reflective Solutions Ltd. Advanced user journey modeling, scalable load, system resources monitors and results analysis. No scripting required. Suitable for any Web, JMS, IP or SQL Application. OS independent.


The Grinder - A Java-based load-testing framework freely available under a BSD-style open-source license. Orchestrate activities of a test script in many processes across many machines, using a graphical console application. Test scripts make use of client code embodied in Java plug-ins. Most users do not write plug-ins themselves, instead using one of the supplied plug-ins. Comes with a mature plug-in for testing HTTP services, as well as a tool which allows HTTP scripts to be automatically recorded.


Proxy Sniffer - Web load and stress testing tool from from Ingenieurbüro David Fischer GmbH Capabilities include: HTTP/S Web Session Recorder that can be used with any web browser; recordings can then be used to automatically create optimized Java-based load test programs; automatic protection from "false positive" results by examining actual web page content; detailed Error Analysis using saved error snapshots; real-time statistics.


Testing Master - Load test tool from Novosoft, capabilities include IP spoofing, multiple simultaneous test cases and website testing features for sites with dynamic content and secure HTTPS pages.


Funkload - Web load testing, stress testing, and functional testing tool written in Python and distributed as free software under the GNU GPL. Emulates a web browser (single-threaded) using webunit; https support; produces detailed reports in ReST, HTML, or PDF.


Avalanche - Load-testing appliance from Spirent Communications, designed to stress-test security, network, and Web application infrastructures by generating large quantities of user and network traffic. Simulates as many as two million concurrently-connected users with unique IP addresses, emulates multiple Web browsers, supports Web Services testing Supports HTTP 1.0/1.1, SSL, FTP, RTSP/ RTP, MS Win Media, SMTP, POP3, DNS, Telnet, and Video on Demand over Multicast protocols.


Loadea - Stress testing tool runs on WinXP; free evaluation version for two virtual users. Capture module provides a development environment, utilizes C# scripting and XML based data. Control module defines, schedules, and deploys tests, defines number of virtual users, etc. Analysis module analyzes results and provides reporting capabilities.


LoadManager - Load, Stress, Stability and Performance testing tool from Alvicom. Runs on all platforms supported by Eclipse and Java.


QEngine Web Performance Testing - Automated testing tool from AdventNet for performance testing (load and stress testing) of web applications and web services. For Linux and Windows.


NeoLoad - Load testing tool for web applications from Neotys with clear and intuitive graphical interface, no scripting/fast learning curve, clear and comprehensive reports and test results. Can design complex scenarios to handle real world applications. Features include data replacement, data extraction, SOAP support, system monitoring (Windows, Linux, IIS, Apache, WebLogic, Websphere...), SSL recording, PDF/HTML/Word reporting, IP spoofing, and more. Multi-platform: Windows, Linux, Solaris.


Test Complete Enterprise - Automated test tool from AutomatedQA Corp. includes web load testing capabilities.


WebPartner Test and Performance Center - Test tool from WebPartner for stress tests, load performance testing, transaction diagnostics and website monitoring of HTTP/HTTPS web transactions and XML/SOAP/WSDL web services.


QTest - Web load testing tool from Quotium Technologies SA. Capabilities include: cookies managed natively, making the script modelling phase shorter; HTML and XML parser, allowing display and retrieval of any element from a HTML page or an XML flux in test scripts; option of developing custom monitors using supplied APIs; more.


Test Perspective Load Test - Do-it-yourself load testing service from Keynote Systems for Web applications. Utilizes Keynote's load-generating infrastructure on the Internet; conduct realistic outside-the-firewall load and stress tests to validate performance of entire Web application infrastructure.


SiteTester1 - Load test tool from Pilot Software Ltd. Allows definition of requests, jobs, procedures and tests, HTTP1.0/1.1 compatible requests, POST/GET methods, cookies, running in multi-threaded or single-threaded mode, generates various reports in HTML format, keeps and reads XML formatted files for test definitions and test logs. Requires JDK1.2 or higher.


httperf - Web server performance/benchmarking tool from HP Research Labs. Provides a flexible facility for generating various HTTP workloads and measuring server performance. Focus is not on implementing one particular benchmark but on providing a robust, high-performance, extensible tool. Available free as source code.


NetworkTester - Tool (formerly called 'NetPressure') from Agilent Technologies uses real user traffic, including DNS, HTTP, FTP, NNTP, streaming media, POP3, SMTP, NFS, CIFS, IM, etc. - through access authentication systems such as PPPOE, DHCP, 802.1X, IPsec, as necessary. Unlimited scalability; GUI-driven management station; no scripting; open API. Errors isolated and identified in real-time; traffic monitored at every step in a protocol exchange (such as time of DNS lookup, time to logon to server, etc.). All transactions logged, and detailed reporting available.


WAPT - Web load and stress testing tool from SoftLogica LLC. Handles dynamic content and HTTPS/SSL; easy to use; support for redirects and all types of proxies; clear reports and graphs.


Visual Studio Team System 2008 Test Edition - A suite of testing tools for Web applications and services that are integrated into the Microsoft Visual Studio environment. These enable testers to author, execute, and manage tests and related work items all from within Visual Studio.


OpenLoad - Affordable and completely web-based load testing tool from OpenDemand; knowledge of scripting languages not required - web-based recorder can capture and translate any user action from any website or web application. Generate up to 1000 simultaneous users with minimum hardware.


Apache JMeter - Java desktop application from the Apache Software Foundation designed to load test functional behavior and measure performance. Originally designed for testing Web Applications but has since expanded to other test functions; may be used to test performance both on static and dynamic resources (files, Servlets, Perl scripts, Java Objects, Data Bases and Queries, FTP Servers and more). Can be used to simulate a heavy load on a server, network or object to test its strength or to analyze overall performance under different load types; can make a graphical analysis of performance or test server/script/object behavior under heavy concurrent load.


TestMaker - Free open source utility maintained by PushToTest.com and Frank Cohen, for performance, scalability, and functional testing of Web application. Features test authoring of Web applications, Rich Internet Applications (RIA) using Ajax, Service Oriented Architecture, and Business Process Management environments. Integrates Selenium, soapUI, TestGen4Web, and HTMLUnit to make test development faster/easier. Repurposes tests from these tools into load and performance tests, functional tests, and business service monitors with no coding. Repurposes unit tests written in Java, Jython, JRuby, Groovy, and other dynamic scripting languages. Runs on any platform.


SiteStress - Remote, consultative load testing service by Webmetrics. Simulates end-user activity against designated websites for performance and infrastructure reliability testing. Can generate an infinitely scalable user load from GlobalWatch Network, and provide performance reporting, analysis, and optimization recommendations.


Siege - Open source stress/regression test and benchmark utility; supports basic authentication, cookies, HTTP and HTTPS protocols. Enables testing a web server with a configurable number of concurrent simulated users. Stress a single URL with a specified number of simulated users or stress multiple URL's simultaneously. Reports total number of transactions, elapsed time, bytes transferred, response time, transaction rate, concurrency, and server response. Developed by Jeffrey Fulmer, modeled in part after Lincoln Stein's torture.pl, but allows stressing many URLs simultaneously. Distributed under terms of the GPL; written in C; for UNIX and related platforms.


JBlitz - Load, performance and functional test tool from Clan Productions. Runs multiple concurrent virtual users.to simulate heavy load. Validates each response using plain text or regular expression searches, or by calling out to your own custom code. Full Java API. For testing and 'bullet-proofing' server side software - ASPs, JSPs, servlets, EJBs, Perl / PHP / C / C++ / CGI scripts etc.


WebServer Stress Tool - Web stress test tool from Paessler AG handles proxies, passwords, user agents, cookies, AAL.


Web Polygraph - Freely available benchmarking tool for caching proxies, origin server accelerators, L4/7 switches, and other Web intermediaries. Other features: for high-performance HTTP clients and servers, realistic traffic generation and content simulation, ready-to-use standard workloads, powerful domain-specific configuration language, and portable open-source implementation. C++ source available; binaries avail for Windows.


OpenSTA - 'Open System Testing Architecture' is a free, open source web load/stress testing application, licensed under the Gnu GPL. Utilizes a distributed software architecture based on CORBA. OpenSTA binaries available for Windows.


PureLoad - Java-based multi-platform performance testing and analysis tool from Minq Software. Includes 'Comparer' and 'Recorder' capabilities, dynamic input data, scenario editor/debugger, load generation for single or distributed sources.


ApacheBench - Perl API for Apache benchmarking and regression testing. Intended as foundation for a complete benchmarking and regression testing suite for transaction-based mod_perl sites. For stress-testing server while verifying correct HTTP responses. Based on the Apache 1.3.12 ab code. Available via CPAN as .tar.gz file.


Torture - Bare-bones Perl script by Lincoln Stein for testing web server speed and responsiveness and test stability and reliability of a particular Web server. Can send large amounts of random data to a server to measure speed and response time of servers, CGI scripts, etc.


WebSpray - Low-cost load testing tool from CAI Networks; includes link testing capabilities; can simulate up to 1,000 clients from a single IP address; also supports multiple IP addresses with or without aliases. For Windows.


eValid LoadTest - Web test tool from Software Research, Inc that uses a 'Test Enabled Web Browser' test engine that provides browser based 100% client side quality checking, dynamic testing, content validation, page performance tuning, and webserver loading and capacity analysis.


WebPerformance Load Tester - Load test tool emphasizing ease-of-use, from WebPerformance Inc. Supports all browsers and web servers; records and allows viewing of exact bytes flowing between browser and server; no scripting required. Modem simulation allows each virtual user to be bandwidth limited. Can automatically handle variations in session-specific items such as cookies, usernames, passwords, IP addresses, and any other parameter to simulate multiple virtual users. For Windows, Linux, Solaris, most UNIX variants.


WebSuite - A collection of load testing, capture/playback, and related tools from Technovations for performance testing of web sites. Modules include WebCorder, Load Director, Report Generator, Batch, Manager, and others. WebSizr load testing tool supports authentication, SSL, cookies, redirects. Recorded scripts can be modified manually. For Windows.


FORECAST - Load testing tool from Facilita Software for web, client-server, network, and database systems. Capabilities include proprietary, Java, or C++ scripting; windows browser or network recording/playback. Supports binary encoded data such as Adobe Flex/AMF, Serialised Java objects etc.SSL; supports NTLM, kerberos, proxies, authentication, redirects, certificates, cookies, caching, bandwidth limitation and page validation. Virtual user data can be parameterized. Works with a wide variety of platforms.


http-Load - Free load test application from ACME Labs to generate web server loads, from ACME Software. Handles HTTP and HTTPS; for Unix.


QALoad - Compuware's tool for load/stress testing of web, database, and character-based systems. Supports HTTP, SSL, SOAP, XML, Streaming Media. Works with a variety of databases, middleware, ERP.


Microsoft WCAT load test tool - Web load test tool from Microsoft for load testing of MS IIS servers; other MS stress tools also listed.


IBM Rational Performance Tester - Performance testing tool from IBM/Rational; has optional extensions to Seibel applications and SAP Solutions. Supports Windows, Linux an

d z/OS as distributed controller agents; provides high-level and detailed views of tests.


SilkPerformer - Enterprise-class load-testing tool from Borland (formerly Segue). Can simulate thousands of users working with multiple protocols and computing environments. Allows prediction of behavior of e-business environment before it is deployed, regardless of size and complexity.


Radview's WebLoad - Load testing tool from Radview Software, also available as part of their TestView web testing suite. Basic version available as open source, add-ons available for purchase. Capabilities include over 75 Performance Metrics; can view global or detailed account of transaction successes/failures on individual Virtual Client level, assisting in capturing intermittent errors; allows comparing of running test vs. past test metrics. Test scripting via visual tool or Javascript. Wizard for automating non-GUI-based services testing; DoS security testing.


Loadrunner - HP's (formerly Mercury's) load/stress testing tool for web and other applications; supports a wide variety of application environments, platforms, and databases. Large suite of network/app/server monitors to enable performance measurement of each tier/server/component and tracing of bottlenecks.
Return to top of web tools listing

Java Test Tools
VisualVM - A free visual tool from Sun to monitor and troubleshoot Java applications. Runs on Sun JDK 6, but is able to monitor applications running on JDK 1.4 and higher. Utilizes various available technologies like jvmstat, JMX, the Serviceability Agent (SA), and the Attach API to get data and uses minimal overhead on monitored applications. Capabilities include: automatically detects and lists locally and remotely running Java applications; monitor application performance and memory consumption; profile application performance or analyze memory allocation; is able to save application configuration and runtime environment together with all taken thread dumps, heap dumps and profiler snaphots into a single application snapshot which can be later processed offline.


Cobertura - Free Java tool to identify which parts of a Java program are lacking test coverage and calculate % coverage; based on jcoverage. Instruments already-compiled Java bytecode; execute from ant or from the command line; generate reports in HTML or XML; shows % of lines and branches covered for each class, each package, and for the overall project. Shows McCabe cyclomatic code complexity of each class, and average cyclomatic code complexity for each package, and for the overall product. Can sort HTML results by class name, percent of lines covered, percent of branches covered, etc. and sort in ascending or decending order.


QCare - Static code analysis tool from ATX Software SA, supports Java, as well as COBOL, C#, C++, VB, SQL, PL/SQL, JavaScript and JSP.


JProfiler - Java profiling tool from ej-Technologies GmbH. Check for performance bottlenecks, memory leaks and threading issues.


Parallel-junit - Open source small library extensions for JUnit. Extends the junit.framework.TestSuite class by running tests in parallel, allowing more efficient test execution. Because TestResult and TestListener aren't designed to run tests in parallel, this implementation coordinates the worker threads and reorder event callbacks so that the TestResult object receives them in an orderly manner. In addition, output to System.out and System.err are also serialized to avoid screen clutter.


EMMA - Open-source toolkit, written in pure Java, for measuring and reporting Java code coverage. Targets support for large-scale enterprise software development while keeping individual developer's work fast and iterative. Can instrument classes for coverage either offline or on the fly (using an instrumenting application classloader); supported coverage types: class, method, line, basic block; can detect when a single source code line is covered only partially; coverage stats are aggregated at method, class, package, and "all classes" levels. Reports support drill-down, to user-controlled detail depth; HTML reports support source code linking. Does not require access to the source code; can instrument individial .class files or entire .jars (in place, if desired). Runtime overhead of added instrumentation is small (5-20%); memory overhead is a few hundred bytes per Java class.


PMD - Open source static analyzer scans java source for problems. Capabilities include scanning for: Empty try/catch/finally/switch statements; Dead code - unused local variables, parameters and private methods; Suboptimal code - wasteful string/stringBuffer usage; Overcomplicated expressions - unnecessary if statements, for loops that could be while loops; Duplicate code - copied/pasted code - could indicate copied/pasted bugs.


Hammurapi - Code review tool for Java (and other languages with latest version). Utilizes a rules engine to infer violations in source code. Doesn't fail on source files with errors, or if some inspectors throw exceptions. Parts of tool can be independently extended or replaced. Can review sources in multiple programming languages, perform cross-language inspections, and generate a consolidated report. Eclipse plugin.


TestNG - A testing framework inspired from JUnit and NUnit; supports JDK 5 Annotations, data-driven testing (with @DataProvider), parameters, distribution of tests on slave machines, plug-ins (Eclipse, IDEA, Maven, etc); embeds BeanShell for further flexibility; default JDK functions for runtime and logging (no dependencies).


Concordian - An open source testing framework for Java developed by David Peterson. Utilizes requirements in plain English using paragraphs, tables and proper punctuation in HTML. Developers instrument the concrete examples in each specification with commands (e.g. "set", "execute", "assertEquals") that allow test scenarios to be checked against the system to be tested. The instrumentation is invisible to a browser, but is processed by a Java fixture class that accompanies the specification. The fixture is also a JUnit test case. Results are exported with the usual green and red indicating successes and failures. Site includes info re similarities and diffs from Fitnesse.


DBUnit - Open source JUnit extension (also usable with Ant) targeted for database-driven projects that, among other things, puts a database into a known state between test runs. Enables avoidance of problems that can occur when one test case corrupts the database and causes subsequent tests to fail or exacerbate the damage. Has the ability to export and import database data to and from XML datasets. Can work with very large datasets when used in streaming mode, and can help verify that database data matches expected sets of values.


StrutsTestCase - Open source Unit extension of the standard JUnit TestCase class that provides facilities for testing code based on the Struts framework, including validation methods. Provides both a Mock Object approach and a Cactus approach to actually run the Struts ActionServlet, allowing testing of Struts code with or without a running servlet engine. Uses the ActionServlet controller to test code, enabling testing of the implementation of Action objects, as well as mappings, form beans, and forwards declarations.


DDSteps - A JUnit extension for building data driven test cases. Enables user to parameterize test cases, and run them more than once using different data. Uses external test data in Excel which is injected into test cases using standard JavaBeans properties. Test cases run once for each row of data, so adding new tests is just a matter of adding a row of data in Excel.


JKool - A light weight performance measurement and monitoring tool from Nastel Inc. for live J2EE, Web and Web service-based applications. It provides timing information for web sessions, including JSP/servlets, JDBC, JMS and Java method calls, to measure performance, detect bottlenecks and failures. Probes include a Web probe (JSP, Servlets), a Java probe (Byte Code Instrumentation), a JMS probe, and a JDBC probe.


StrutsTestCase for JUnit - Open source extension of the standard JUnit TestCase class that provides facilities for testing code based on the Struts framework. Provides both a Mock Object approach and a Cactus approach to actually run the Struts ActionServlet, allowing testing Struts code with or without a running servlet engine. Because it uses the ActionServlet controller to test code, can test not only the implementation of Action objects, but also mappings, form beans, and forwards declarations. Since it already provides validation methods, it's quick and easy to write unit test cases.


JavaNCSS - A free Source Measurement Suite for Java by Clemens Lee. A simple command line utility which collects various source code metrics for Java. The metrics are collected globally, for each class and/or for each function.


Open Source Profilers for Java - Listing of about 25 open source code profilers for Java from 2006 from the Manageability.org web site.


SofCheck Inspector - Tool from SofCheck Inc. for analysis of Java for logic flaws and vulnerabilities. Exlpores all possible paths in byte code and detects flaws and vulnerabilities in areas such as: array index out of bounds, buffer overflows, race conditions, null pointer dereference, dead code, etc. Provides 100% path coverage and can report on values required for 100% unit test coverage. Patented precondition, postcondition and presumption reporting can help detect Malware code insertion.


CodePro - Suite of Java tools from Instantiations Inc. CodePro AnalytixX is an Eclipse-based Java software testing tool and includes features like code audit, metrics, automated unit tests, and more. CodePro Profiler, an Eclipse-based Java profiling tool enables inspection of a running application for performance bottlenecks, detect memory leaks and solve thread concurrency problems. EclipsePro Test automatically generates JUnit tests and includes an editor and analysis tool, provides test cases/results in tabular layout; mouse over failing case and Editor shows the failure message. WindowTester Pro for Swing or SWT UI's enables recording of GUI tests; watches actions and generates test cases automatically; customize the generated Java tests as needed. Provides a rich GUI Test Library, hiding complexities and threading issues of GUI test execution; test cases are based on the JUnit standard


Squish for Java - Automated Java GUI testing tool for Java Swing, AWT, SWT and RCP/Eclipse applications. Record or create/modify scripts using Tcl, Python, JavaScript. Automatic identification of GUI objects of the AUT; inspect AUT's objects, properties and methods on run-time using the Squish Spy. Can be run via a GUI front-end or via command line tools. Can execute tests in a debugger allowing setting breakpoints and stepping through test scripts.


Klocwork K7 - Static analysis technology for Java, C, C++, analyzes defects & security vulnerabilities, architecture & header file anomalies, metrics. Developers can run Klocwork in Eclipse or various other IDE's. Users can select scope of reporting as needed by selecting software component, defect type, and defect state/status.


Coverity Prevent - Tool from Coverity Inc. for analysis of Java source code for security issues. Explores all possible paths in source code and detects security vulnerabilities and defects in multiple areas: memory leaks, memory corruption, and illegal pointer accesses, buffer overruns, format string errors and SQL injections vulnerabilities, multi-threaded programming

concurrency errors, etc.


GUIDancer - Eclipse-based tool from Bredex GmbH for automated testing of Java/Swing GUI's, Tests are specified, not programmed - no code or script is produced. Test specification is initially separate from the AUT, allowing test creation before the software is fully functional or available. Specification occurs interactively; components and actions are selected from menus, or by working with the AUT in an advanced "observation mode". Test results and errors viewable in a results view, can be saved as html or xml file.


CMTJava - Complexity measurement tool from Verifysoft GmbH. Includes McCabe cyclomatic complexity, lines-of-code metrics, Halstead metrics, maintainability index.


JavaCov - A J2SE/J2EE Coverage testing tool from Alvicom; specializes in testing to MC/DC (Modified Condition/Decision Coverage) depth. Capabilities include: Eclipse plugin; report generation into HTML and XML; Apache Ant integration and support for test automation.


Jameleon - Open source automated testing harness for acceptance-level and integration testing, written in Java. Separates applications into features and allows those features to be tied together independently, in XML, creating self-documenting automated test cases. These test-cases can then be data-driven and executed against different environments. Easily extensible via plug-ins; includes support for web applications and database testing.


Agitator - Automated java unit testing tool from Agitar Software. Creates instances of classes being exercised, calling each method with selected, dynamically created sets of input data, and analyzing results. Stores all information in XML files; works with Eclipse and a variety of IDEs. Also available are: automated JUnit generation, code-rule enforcement, and more.

etc. - works with a variety of configurable and modifiable rulesets. Integrates with a wide variety of IDE's.


JLint - Open source static analysis tool will check Java code and find bugs, inconsistencies and synchronization problems by doing data flow analysis and building the lock graph.


Lint4j - A static Java source and byte code analyzer that detects locking and threading issues, performance and scalability problems, and checks complex contracts such as Java serialization by performing type, data flow, and lock graph analysis. Eclipse, Ant and Maven plugins available.
FindBugs - Open source static analysis tool to inspect Java bytecode for occurrences of bug patterns, such as difficult language features, misunderstood API methods, misunderstood invariants when code is modified during maintenance, garden variety mistakes such as typos, use of the wrong boolean, etc. Can report false warnings, generally less than 50%.


CheckStyle - Open source tool for checking code layout issues, class design problems, duplicate code, bug patterns, and much more.
Java Development Tools - Java coverage, metrics, profiler, and clone detection tools from Semantic Designs.
AppPerfect Test Studio - Suite of testing, tuning, and monitoring products for java development from AppPerfect Corp. Includes: Unit Tester, Code Analyzer, Java/J2EE Profiler and other modules.
GJTester - Java unit, regression, and contract (black box) test tool from TreborSoft. Enables test case and test script development without programming. Test private and protected functions, and server application's modules, without implementing test clients, regression testing for JAVA VM upgrades. Useful for testing CORBA, RMI, and other server technologies as well. GUI interface emphasizing ease of use.
QFTest - A cross-platform system and load testing tool from Quality First Software with support for for Java GUI test automation (Swing, Eclipse/SWT, Webstart, Applets, ULC). Includes small-scale test management capabilities, capture/replay mechanism, intuitive user interface and extensive documentation, reliable component recognition and can handle complex and custom GUI objects, integrated test debugger and customizable reporting.
Cactus - A simple open-source test framework for unit testing server-side java code (Servlets, EJBs, Tag Libs, Filters, etc.). Intent is to allow fine-grained continuous testing of all files making up an application: source code but also meta-data files (such as deployment descriptors, etc) through an in-container approach. It uses JUnit and extends it. Typically use within your IDE, or from the command line, using Ant. From Apache Software Foundation.
JUnitPerf - Allows performance testing to be dynamically added to existing JUnit tests. Enables quick composition of a performance test suite, which can then be run automatically and independent of other JUnit tests. Intended for use where there are performance/scalability requirements that need re-checking while refactoring code. By Mike Clark/Clarkware Consulting, licensed under the BSD License.
Koalog Code Coverage - Code coverage analyzer for Java applications from Koalog SARL. Includes: in-process or remote coverage computation, capability of working directly on Java method binaries (no recompilation), predefined (XML, HTML, LaTex, CSV, TEXT) or custom report generation, and session merging to allow compilation of overall results for distinct executions. Integrates with Ant and JUnit.
Abbot Java GUI Test Framework - Testing framework by Timothy Wall provides automated event generation and validation of Java GUI components, improving upon the very basic functions provided by the java.awt.Robot class. (Abbot = "A Better 'Bot'). The framework may be invoked directly from Java code or accessed without programming through the use of scripts via 'Costello', a script editor/recorder. Suitable for use both by developers for unit tests and QA for functional testing. Free - available under the GNU Lesser General Public License
JUnit - Framework to write repeatable java unit tests - a regression testing framework written by Erich Gamma and Kent Beck. For use by developers implementing unit tests in Java. Free Open Source Software released under the IBM Public License and hosted on SourceForge. Site includes a large collection of extensions and documentation.
jfcUnit - Framework for developing automated testing of Java Swing-based applications at the UI layer (as opposed to testing at lower layers, for which JUnit may be sufficient). Provides recording and playback capabilities. Also available as plugins for JBuilder and Eclipse. Free Open Source Software from SourceForge site.
JBench - Freeware Java benchmarking framework to compare algorithms, virtual machines, etc. for speed. Available as binary distribution (including documentation), source distribution, or jar file.
Clover - Code coverage tool for Java from Atlassian. Fully integrated plugin for Eclipse, IntelliJ IDEA and projects using Apache ANT and Maven. View coverage data in XML, HTML, PDF, or via a Swing GUI. Tracks cyclomatic complexity. TestOptimization automatically prioritises just the tests needed to cover the particular changes made.
JCover - Java code test coverage analysis tool from Codework Limited. Works with source or compiled files. Gathers coverage measures of branches, statements, methods, classes, file, package and produces reports in multiple formats. Coverage difference comparison between runs. Coverage API provided.
Structure101 - Java source code visualization tool from Headway Software. Lets user understand, measure, and control architecture, design, composition, and dependencies of code base. Analyzes byte code and shows all dependencies, at all levels and between all levels; method, class, package, application. Measures code complexity using a measurement framework called XS. For Windows, Linux and Mac OS X.
Java Tool Suite from Man Machine Systems - Includes JStyle, a Java source analyzer to generate code comments and metrics such as inheritance depth, Cyclomatic Number, Halstead Measures, etc; JPretty reformats Java code according to specified options; JCover test coverage analyzer; JVerify Java class/API testing tool uses an invasive testing model allowing access to internals of Java objects from within a test script and utilizes a proprietary OO scripting language; JMSAssert, a tool and technique for writing reliable software; JEvolve, an intelligent Java code evolution analyzer that automatically analyzes multiple versions of a Java program and shows how various classes have evolved across versions; can 'reason' about selective need for regression testing Java classes; JBrowser class browser; JSynTest, a syntax testing tool that automatically builds a Java-based test data generator.
JProbe Suite - Collection of Java debugging tools from Quest Software; includes JProbe Profiler and JProbe Memory Debugger for finding performance bottlenecks and memory leaks, LProbe Coverage code coverage tool, and JProbe Threadalyzer for finding deadlocks, stalls, and race conditions. JProfiler freeware version available.
Krakatau Professional for Java - Software metrics tool from Power Software includes more than 70 OO, procedural, complexity, and size metrics related to reusability, maintainability, testability, and clarity. Includes Cyclomatic Complexity, Enhanced Cyclomatic Complexity, Halstead Software Science metrics, LOC metrics and MOOD metrics. Has online advisor for quality improvement.
Jtest - ParaSoft's Jtest is an integrated, automatic unit testing and standards compliance tool for Java. It automatically generates and executes JUnit tests and checks whether code follows 400 coding standards and can automatically correct for many.
DevPartner Java Edition - Compuware's (formerly NuMega) debugging/productivity tool to detect and diagnose Java bugs and memory and performance problems; thread and event analysis, coverage analysis. Integrates with several Java IDE's.
VTune - Intel's performance tuning tool for applications running on Intel processors; includes Java support. Includes suggestions for optimization techniques.
TCAT for Java - Part of Software Research's TestWorks suite of test tools; code coverage analyzer and code analysis for Java; written in Java.
Open Source code analyzers listing - A listing of open source Java code analysis tools written in Java.
Open Source code coverage tools listing - A listing of open source Java code coverage tools written in Java.
Open Source Java test tools listing - A listing of open source tools and frameworks for Java testing, written in Java.
Open Source web test tools listing - A listing of open source web test tools and frameworks written in Java.
(Note: some other tools in these listings also handle testing, management, or load testing of java applets, servlets, and applications, or are planning to add such capabilities. Check listed web sites for current information.)
Return to top of web tools listing

Link Checking Tools
LinkTiger - Hosted link checker; free and $pro versions. Capabilities include e-mail alerts, dashboard, reporting; canned reports or create rich custom reports. Scans PDF, CSS, Flash and MS Office files, flash-animation.
SiteAnalysis - Hosted service from Webmetrics, used to test and validate critical website components, such as internal and external links, domain names, DNS servers and SSL certificates. Runs as often as every hour, or as infrequent as once a week. Ideal for dynamic sites requiring frequent link checking.
HiSoftware Link Validation Utility - Link validation tool; available as part of the AccVerify Product Line.
ChangeAgent - Link checking and repair tool from Expandable Language. Identifies orphan files and broken links when browsing files; employs a simple, familiar interface for managing files; previews files when fixing broken links and before orphan removal; updates links to moved and renamed files; fixes broken links with an easy, 3-click process; provides multiple-level undo/redo for all operations; replaces links but does not reformat or restructure HTML code. For Windows.
Link Checker Pro - Link check tool from KyoSoft; can also produce a graphical site map of entire web site. Handles HTTP, HTTPS, and FTP protocols; several report formats available. For Windows platforms.
Web Link Validator - Link checker from REL Software checks links for accuracy and availability, finds broken links or paths and links with syntactic errors. Export to text, HTML, CSV, RTF, Excel. Freeware 'REL Link Checker Lite' version available for small sites. For Windows.
Site Audit - Low-cost on-the-web link-checking service from Blossom Software.
Xenu's Link Sleuth - Freeware link checker by Tilman Hausherr; supports SSL websites; partial testing of ftp and gopher sites; detects and reports redirected URL; Site Map; for Windows.
Linkalarm - Low cost on-the-web link checker from Link Alarm Inc.; free trial period available. Automatically-scheduled reporting by e-mail.
Alert Linkrunner - Link check tool from Viable Software Alternatives; evaluation version available. For Windows.
InfoLink - Link checker program from BiggByte Software; can be automatically scheduled; includes FTP link checking; multiple page list and site list capabilities; customizable reports; changed-link checking; results can be exported to database. For Windows. Discontinued, but old versions still available as freeware.
LinkScan - Electronic Software Publishing Co.'s link checker/site mapping tool; capabilities include automated retesting of problem links, randomized order checking; can check for bad links due to specified problems such as server-not-found, unauthorized-access, doc-not-found, relocations, timeouts. Includes capabilities for central management of large multiple intranet/internet sites. Results stored in database, allowing for customizable queries and reports. Validates hyperlinks for all major protocols; HTML syntax error checking. For all UNIX flavors, Windows, Mac.
CyberSpyder Link Test - Shareware link checker by Aman Software; capabilities include specified URL exclusions, ID/Password entries, test resumption at interruption point, page size analysis, 'what's new' reporting. For Windows.
Return to top of web tools listing

HTML Validators
RealValidator - Shareware HTML validator based on SGML parser by Liam Quinn. Unicode-enabled, supports documents in virtually any language; supports XHTML 1.0, HTML 4.01, HTML 4.0, HTML 3.2, HTML 3.0, and HTML 2.0 ; extensible - add proprietary HTML DTDs or change the existing ones; fetches external DTDs by HTTP and caches them for faster validation; HTML 3.2 and HTML 4.0 references included as HTML Help. For Windows.
HTML Validator - Firefox add-on, open source by Marc Gueury. The validation is done on your local machine inside Firefox and Mozilla. Error count of an HTML page is seen as an icon in the status bar when browsing. Can validate the HTML sent by the server or the HTML in the memory (after Ajax execution). Error details available when viewing the HTML source of the page. Based on Tidy and OpenSP (SGML Parser). Available in 17 languages and for Windows and other platforms.
CSE 3310 HTML Validator - HTML syntax checker for Windows from AI Internet Solutions. Supports wide variety of standards; accessibility (508) checking; uppercase/lowercase converter. Free 'lite' version. For Windows.
(Note: Many of the products listed in the Web Site Management Tools section include HTML validation capabilities.)
Return to top of web tools listing

Free On-the-Web HTML Validators and Link Checkers
Site Check - Type in one URL and automatically run HTML and stylesheet validators, accessibility assessment, link check, load time check, and more. Organizes access to a collection of free online web test tools. Site of UITest.com/Jens Meiert. Also lists a wide variety of free online web analysis/development/test tools.
Link Valet - Online link checker, includes capability fot hilight links modified since a specified date.
Dead-Links.com - Free link-checker limited to 25 pages per domain and 150 external documents. Higher limits if site has a link to Dead-Links.com.
WDG HTML Validator - Web Design Group's validator - latest HTML version support, flexible input methods, user-friendly error messages.
Web Page 'Purifier' - Free on-the-web HTML checker by DJ Delorie allows viewing a page 'purified' to HTML 2.0, HTML 3.2, HTML 4.0, or WebTV 1.1. standards.
W3C HTML Validation Service - HTML validation site run by the WWW Consortium (the folks who set web standards); handles one URL at a time; Can choose from among 30 character encoding types, and multiple HTML and XHTML document types/versions.
W3C CSS Validation Service - CSS validation site run by the WWW Consortium (the folks who set web standards); handles one URI at a time; or upload file or validate by direct input.
W3C Link Checker - Link checking service run by the WWW Consortium (the folks who set web standards); configurable. Handles one URL at a time. PERL source also available for download.
Weblint Gateway - Site with online HTML validator; somewhat configurable. Site provided by San Francisco State University.
Web Page Backward Compatibility Viewer - On-the-web HTML checker by DJ Delorie; will serve a web page to you with various selectable tags switched on or off; very large selection of browser types; to check how various browsers or versions might see a page.
Return to top of web tools listing

PERL and C Programs for Validating and Checking
W3C Link Checker - Link checker PERL source code, via the WWW Consortium (the folks who set web standards); configurable. Handles one URL at a time.
HTML TIDY - Free utility available from SourceForget.net; originally by Dave Raggett. For automatic fixing of HTML errors, formatting disorganized editing, and finding problem HTML areas. Available as source code or binaries.
Big Brother - Freeware command-line link checker for Unix, Windows, by Francois Pottier. Available as source code; binary avaialable for Linux.
LinkLint - Open source Perl program checks local/remote HTML links. Includes cross referenced and hyperlinked output reports, ability to check password-protected areas, support for all standard server-side image maps, reports of orphan files and files with mismatching case, reports URLs changed since last checked, support of proxy servers for remote URL checking. Distributed under Gnu General Public License. Has not been updated in recent years.
MOMspider - Multi-Owner Maintenance Spider; link checker. PERL script for a web spider for web site maintenance; for UNIX and PERL. Utilizes the HTTP 'HEAD' request instead of the 'GET' request so that it does not require retreival of the entire html page. This site contains an interesting discussion on the use of META tags. Not updated in recent years.
HTMLchek for awk or perl - Old but still useful HTML 2.0 or 3.0 validator programs for AWK or PERL by H. Churchyard; site has much documentation and related info. Not updated in recent years.
Return to top of web tools listing

Web Functional/Regression Test Tools
SafariWatir - Ruby gem that adds Watir support for Safari on the Mac (the originial Watir is for Windows); open source by Dave Hoover and others. For OS X running Safari.
Celerity - An open source JRuby wrapper around HtmlUnit. Runs as a headless Java browser - speeding up web testing; Java threads enablle running tests in parallel; can run in background. JavaScript support. Provides simple API for programmatic navigation thu web apps. Intended to be API compatible with Watir. For any platform.
Webrat - Ruby-based utility to enable quick development of web app acceptance tests. Open source by Bryan Helmkamp. Leverages the DOM to run tests similarly to in-browser test tools like Watir or Selenium without the associated performance hit and browser dependency. Best for web apps that do NOT utilize Javascript; apps using Javascript in-browser tools may be more appropriate.
CubicTest - An open source graphical Eclipse plug-in for writing functional web tests in Selenium and Watir. Makes web tests faster and easier to write, and provides abstractions to make tests more robust and reusable. Tests are stored in XML, directly mapped from the CubicTest domain model to XML via XStream. Tests can at any time be exported to Selenium Core tables (a popular test format) or Watir test cases. Supports recording; maven.
Selenium Grid - An open source web functional testing tool that can transparently distribute your tests on multiple machines to enable running tests in parallel, cutting down the time required for running in-browser test suites. This enables speed-up of in-browser web testing. Selenium tests interact with a 'Selenium Hub' instead of Selenium Remote Control. The Hub allocates Selenium Remote Controls to each test. The Hub is also in charge of routing the Selenium requests from the tests to the appropriate Remote Control as well as keeping track of testing sessions. Requires Java 5+ JDK, Ant 1.7.x
Mechanize - Open source; Ruby library for automating interaction with websites; automatically stores and sends cookies, follows redirects, can follow links, and submit forms. Form fields can be populated and submitted. Also keeps track of the sites visited. It is a Ruby version of Andy Lester's Perl 'Mechanize' Note: does not handle javascript.
Automation Anywhere - Tool from Tethys Solutions using 'SMART' Automation Technology offers over 180+ powerful actions for web automation. Works with any website, including complex websites using java, javascript, AJAX, Flash or iFrames. Agent-less remote deployment allows automated task to be run over various machines on the network. An advanced Web Recorder ensures accurate re-runs taking into account website changes. Also includes an editor with Point & Click wizards to automate tasks in minutes. includes link checking.
StoryTestIQ - StoryTestIQ (STIQ) is a test framework used to create Automated Acceptance Tests. It's a mashup of Selenium and FitNesse: its "wiki-ized" Selenium with widgets and features that make it easier to write and organize Selenium tests.
Web2Test - Automated test tool from itCampus Software for testing of web-based applications and portals. Runs under Windows and Linux and supports Firefox, Internet Explorer, Mozilla and Seamonkey. Provides a scripting interface in Jython and Groovy. Test scripts are browser and platform independent; supports data driven and distributed testing.
Watij - Web Application Testing in Java, an open source pure Java API. Based on the simplicity of the Watir open source web test framework and enhanced by the capabilities of Java; automates functional testing of web apps through a real browser. Provides a BeanShell Desktop console; For MS IE on Windows.
TestMaker - Free open source utility maintained by PushToTest.com and Frank Cohen, for functional testing as well as performance and scalability testing. Features test authoring of Web applications, Rich Internet Applications (RIA) using Ajax, Service Oriented Architecture, and Business Process Management environments. Integrates Selenium, soapUI, TestGen4Web, and HTMLUnit to make test development faster/easier. Repurposes tests from these tools into tests, and business service monitors with no coding. Repurposes unit tests written in Java, Jython, JRuby, Groovy, and other dynamic scripting languages. Runs on any platform.
AutoMate - Automation platform from Network Automation, includes capability to simulates GUI activity via the browser.Inc with robust automated testing capabilities. Capabilities include support for HTTPS; Microsoft Excel Integration; a test run Event Database, native Terminal Emulation support. Tasks can be developed via drag-and-drop without writing code. Runs on Windows platforms.
Automation Anywhere - Functional test automation tool from Tethys Solutions, LLC, includes web test automation capabilities - includes a web recorder that understands web controls; web page data extraction capabilities. For Win platforms
Gomez RealityCheck XF - Provides functional testing for Web 2.0 applications; a solution for cross-browser, functional QA testing of traditional, Ajax-enabled, and other Rich Internet Applications. Enables easy creation and loading of scripts of business transactions recorded using Selenium.
iMacros for Firefox - Free Firefox add-on to record and automate web interactions. Can use variables inside the macros, and import data from CSV files. Includes user agent switcher, PDF download and Flash, ad and image blocking functions. The recorded macros can be combined and controlled with Javascript, so complex tasks can be scripted. The EXTRACT command enables reading of data from a website and exporting it to CSV files. Full Unicode support and works with all languages including multi-byte languages such as Chinese. STOPWATCH command enables capturing of web page response times
Avignon Acceptance Testing System - Open source acceptance test system that allows writing of executable tests in a language that the user can define. It uses XML to define the syntax of the language but, if the user chooses to extend the language, allows the semantics of the tests to be user-defined. Includes modules for testing web applications through either IE or FireFox, and modules for testing Swing and .NET WinForm applications also..
InCisif.Net - Web test tool from InCisif Software for client side functional testing of web apps under MSIE, using C# or VB.NET. Use InCisif Assistant to record user interactions with web application. Write, edit, execute and debug using MS Visual Studio or Visual Basic and C# Express.
Sahi - Free open-source web test tool, written in java and javascript, by Narayan Raman; capabilities include an Accessor Viewer for identifying html elements for scripting, editable scripts (javascript), simple APIs, ant support for playback of suites of tests, multi threaded playback, HTTP and HTTPS support, AJAX support, logging/reports, suites can run in multiple threads thus reducing the test execution time.
Solstice Integra Suite - Automation tool from Solstice Software. Contains Solstice Integra Test Automation, which offers a set of out-of-the-box test automation and management features for testing within integration and SOA environments. Solstice Integra Test Automation can be used alone or in conjunction with one or more of pluggable Platform Libraries that are tailored to optimize validation of today's leading ESB and SOA platforms. Solstice Integra Platform Libraries include TIBCO, WebSphere, webMethods, J2EE and BEA. Includes unit testing, record-and-replay, message tracing, and simulation capabilities.
Vermont HighTest Plus - Regression-testing tool from Vermont Creative Software for browser-based applications; also tests stand-alone; direct integration into Internet Explorer. Integrated Debugger allows stepping through tests one line at a time to examine the value of variables in real-time.
WebFT - Web-centric functional testing solution from Radview, supports both established and emerging web technologies. Provides a visual environment for creating Agendas (scripts) that include test recording, editing, debugging, verification and reporting features.
Floyd - A Java library for automated testing of web applications; provides full control of standard web browsers such as Firefox and MSIE. Interaction with the browser and any loaded web pages is achieved via calls to Floyd's Java API. Has two main components: a normal browser embedded into the web application and controlled via its public interface, and an embedded servlet container/web server. Can be used with any unit test library,
Imprimatur - Free web functional testing tool by Tony Locke, written in Java as a command-line application. Tests are described in a simple XML file; along with standard GET, POST and DELETE methods, handles HTTP authentication and file uploads. Responses can be validated using regular expressions.
WET - Open source web testing tool that drives MSIE directly; from Qantom Software Pvt. Ltd. Has many features like multiple parameter based object identification for more reliable object recognition, support for XML Based Object Repository and more. Scripting in Ruby; written in Ruby.
SOASTA Concerto - A suite of visual tools for automated web functional and load testing from SOASTA, Inc. Available as services on the web. Drag and drop visual interface that also allows access to underlying message complexity. Task-specific visual editors support creation of targets, messages, test cases, and test compositions. Works with Firefox and MSIE, Win and OSX.
Regression Tester - Web test tool from Info-Pack.com allows testing of functionality of any page or form Reports are fully customizable.
Yawet - Visual web test tool from InforMatrix GmbH enables graphical creation of web app tests. Create, run and debug functional and regression tests for web applications. Can verify HTML, XML, and PDF' ability to do report generation, reusable step libraires and parameterization. Freeware; download jar file and start by double-click or with command javaw -jar yawet.jar
vTest - Web functional and regression test tool from Verisium Inc. Includes record and playback capabilities and scripting utilizing JavaScript. For Windows platforms.
SWExplorerAutomation - Low cost web tool from Webius creates an automation API for any Web application which uses HTML and DHTML and works with MSIE. The Web application becomes programmatically accessible from any .NET language. The SWExplorerAutomation API provides access to Web application controls and content. The API is generated using SWExplorerAutomation Visual Designer, which helps create programmable objects from Web page content. Features include script recording and VB/C# code generation.
LISA for Web Apps - Automated web application testing tool from iTKO, Inc. Browser-based test record and playback. Point-and-click capture and reuse of a test case against any web application using any browser type. No test coding or scripting. Supports active sessions, SSL, authentication and magic strings.
Squish for Web - Cross platform automated testing framework from Froglogic GmbH for HTML-based Web and Web 2.0/Ajax applications running in any of several browsers. Record or create/modify scripts using Tcl, Python, JavaScript. Automatic identification of GUI objects of the AUT; inspect AUT's objects, properties and methods on run-time using the Squish Spy. Can be run via a GUI front-end or via command line tools. Can execute tests in a debugger allowing setting breakpoints and stepping through test scripts.
Funkload - Web functional testing and load testing tool written in Python and distributed as free software under the GNU GPL. Emulates a web browser (single-threaded) using webunit; https support; produces detailed reports in ReST, HTML, or PDF. Functional tests are pure Python scripts using the pyUnit framework.
WebCorder - Free GUI web testing tool from Crimson Solutions, developed in VB. Designed for end users who are doing web based software testing, as a simple tool to record test scenarios, and play them back and generate log files. The user may also check for text or images on the screen or save screenshots.
Watir - 'Web Application Testing in Ruby', a free open-source tool, drives MSIE browser and checks results. Uses Ruby, a full featured object-oriented scripting language. Does not work with ActiveX plugin components, Java Applets, Macromedia Flash, or other plugin applications. Note: additional tools are available to extend some capabilities - see the Alternative Tools for Web Testing' page at the OpenQA site for more info.
FireWatir - Open source web testing tool has a similar API to Watir, though accesses the DOM by invoking JavaScript by using the JSSh XPI to telnet into the browser. While Watir works with MSIE, FireWatir is compatible with Firefox 1.5 and above. FireWatir allows Watir scripts written for IE to work with Firefox as well, usually requiring either no change or very small changes to existing scripts. It is planned for FireWatir and Watir to be merged. The wiki includes info on compatibility issues between Watir and Firewatir.
WatiN - 'Web Application Testing in .Net', a free open-source tool, drives MSIE browser and checks results. Uses C#. Automates all major HTML elements, find elements by multiple attributes, supports AJAX website testing, supports frames (cross domain) and iframes, supports popup dialogs like alert, confirm, login etc.,supports HTML dialogs (modal and modeless), and has a basic (extensible) logging mechanism Also available is a WatiN Test Recorder
Selenium - Free open-source tool, originially from Thoughtworks. Records web apps on Firefox; scripts recorded in 'Selenese' or any of 6 languages. Run against Internet Explorer, Mozilla and Firefox on Windows, Linux and Mac. For browser compatability testing and system functional testing.
PesterCat - Low cost web functional testing tool from PesterCat LLC. Features include recording and playback of HTTP web requests, XML format for saved scripts, HTTP response validations, perform backend database validations or call procedures, use variables and variable setters to make scripts dynamic, automate test scripts with Ant tasks to run scripts and generate reports. Requires Java JRE; for Linux, Mac OSX, and Windows.
IeUnit - IeUnit is an open-source simple framework to test logical behaviors of web pages, released under IBM's Common Public License. It helps users to create, organize and execute functional unit tests. Includes a test runner with GUI interface. Implemented in JavaScript for the Windows XP platform with Internet Explorer.
QEngine Web Test Studio - Automated testing tool from AdventNet for functional testing of web applications and web services. For Linux anx Windows. Records and plays in IE, Mozilla, and Firefox browsers.
AppPerfect DevSuite - Suite of testing, tuning, and monitoring products from AppPerfect Corp. that includes a web functional testing module. Records browser interaction by element instead of screen co-ordinates. Supports handling dynamic content created by JavaScript; supports ASP, JSP, HTML, cookies, SSL. For Windows and MSIE; integrates with a variety of IDE's.
JStudio SiteWalker - Test tool from Jarsch Software Studio allows capture/replay recording; fail definitions can be specified for each step of the automated workflow via JavaScript. JavaScript's Document Object Model enables full access to all document elements. Test data from any database or Excel spreadsheet can be mapped to enter values automatically into HTML form controls. HTML-based test result reports can be generated. Shareware for Windows/MSIE.
Test Complete Enterprise - Automated test tool from AutomatedQA Corp. for testing of web applicatons as well as Windows, .NET, and Java applications. Includes capabilities for automated functional, unit, regression, manual, data-driven, object-driven, distributed and HTTP load, stress and scalability testing. Requires Windows and MSIE.
actiWate - Java-based Web application testing environment from Actimind Inc. Advanced framework for writing test scripts in Java (similar to open-source frameworks like HttpUnit, HtmlUnit etc. but with extended API), and Test Writing Assistant - Web browser plug-in module to assist the test writing process. Freeware.
WebInject - Open source tool in PERL for automated testing of web applications and services. Can be used to unit test any individual component with an HTTP interface (JSP, ASP, CGI, PHP, servlets, HTML forms, etc.) or it can be used to create a suite of HTTP level functional or regression tests.
jWebUnit - Open source Java framework that facilitates creation of acceptance tests for web applications. Provides a high-level API for navigating a web application combined with a set of assertions to verify the application's correctness including navigation via links, form entry and submission, validation of table contents, and other typical business web application features. Utilizes HttpUnit behind the scenes. The simple navigation methods and ready-to-use assertions allow for more rapid test creation than using only JUnit and HttpUnit.
SimpleTest - Open source unit testing framework which aims to be a complete PHP developer test solution. Includes all of the typical functions that would be expected from JUnit and the PHPUnit ports, but also adds mock objects; has some JWebUnit functionality as well. This includes web page navigation, cookie testing and form submission.
WinTask - Macro recorder from TaskWare, automates repetitive tasks for Web site testing (and standard Windows applications), with its HTML objects recognition. Includes capability to expand scope of macros by editing and adding loops, branching statements, etc. (300+ commands); ensure robustness of scripts with Synchronization commands. Includes a WinTask Scheduler.
Canoo WebTest - Free Java Open Source tool for automatic functional testing of web applications. XML-based test script code is editable with user's preferred XML editor; until recording capabilities are added, scripts have to be developed manually. Can group tests into a testsuite that again can be part of a bigger testsuite. Test results are reported in either plain text or XML format for later presentation via XSLT. Standard reporting XSLT stylesheets included, and can be adapted to any reporting style or requirements.
TestSmith - Functional/Regression test tool from Quality Forge. Includes an Intelligent, HTML/DOM-Aware and Object Mode Recording Engine, and a Data-Driven, Adaptable and Multi-Threaded Playback Engine. Handles Applets, Flash, Active-X controls, animated bitmaps, etc. Controls are recorded as individual objects independent of screen positions or resolution; playback window/size can be different than in capture. Special validation points, such as bitmap or text matching, can be inserted during a recording, but all recorded items are validated and logged 'on the fly'. Fuzzy matching capabilities. Editable scripts can be recorded in SmithSript language or in Java, C++ or C++/MFC.
TestAgent - Capture/playback tool for user acceptance testing from Strenuus, LLC. Key features besides capture/playback include automatically detecting and capturing standard and custom content errors. Reports information needed to troubleshoot problems. Enables 'Persistent Acceptance Testing' that activates tests each time a web application is used.
MITS.GUI - Unique test automation tool from Omsphere LLC; has an intelligent state machine engine that makes real-time decisions for navigating through the GUI portion of an application. It can test thousands of test scenarios without use of any scripts. Allows creation of completely new test scenarios without ever having performed that test before, all without changing tool, testware architecture (object names, screen names, etc), or logic associated with the engine. Testers enter test data into a spreadsheet used to populate objects that appear for the particular test scenario defined.
Badboy - Tool from Bradley Software to aid in building and testing dynamic web based applications. Combines sophisticated capture/replay ability with performance testing and regression features. Free for most uses; source code avalable.
SAMIE - Free tool designed for QA engineers - 'Simple Automated Module For Internet Explorer'. Perl module that allows a user to automate use of IE via Perl scripts; Written in ActivePerl, allowing inheritance of all Perl functionality including regular expressions, Perl dbi database access, many Perl cpan library functions. Uses IE's built in COM object which provides a reference to the DOM for each browser window or frame. Easy development and maintenance - no need to keep track of GUI maps for each window. For Windows.
PAMIE - Free open-source 'Python Automated Module For Internet Explorer' Allows control of an instance of MSIE and access to it's methods though OLE automation . Utilizes Collections, Methods, Events and Properties exposed by the DHTML Object Model.
PureTest - Free tool from Minq Software AB, includes an HTTP Recorder and Web Crawler. Create scenarios using the point and click interface. Includes a scenario debugger including single step, break points and response introspection. Supports HTTPS/SSL, dynamic Web applications, data driven scenarios, and parsing of response codes or parsing page content for expected or unexpected strings. Includes a Task API for building custom test tasks. The Web Crawler is useful for verifying consistency of a static web structure, reporting various metrics, broken links and the structure of the crawled web. Multi-platform - written in Java.
Solex - Web application testing tool built as a plug-in for the Eclipse IDE (an open, extensible IDE). Records HTTP messages by acting as a Web proxy; recorded sessions can be saved as XML and reopened later. HTTP requests and responses are fully displayed in order to inspect and customize their content. Allows the attachment of extraction or replacement rules to any HTTP message content, and assertions to responses in order to validate a scenario during its playback.
QA Wizard - Automated functional test tool for web and windows applications from Seapine Software. Advanced object binding reduces script changes when Web-based apps change. Next-generation scripting language eliminates problems created by syntax or other language errors. Includes capability for automated scripting, allowing creation of more scripts in less time. Supports unlimited set of ODBC-compatible data sources as well as MS Excel, tab/comma delimited file formats, and more. Free Demo and Test Script available. For Windows platforms.
HttpUnit - Open source Java program for accessing web sites without a browser, from SourceForge.net/Open Source Development Network, designed and implemented by Russell Gold. Ideally suited for automated unit testing of web sites when combined with a Java unit test framework such as JUnit. Emulates the relevant portions of browser behavior, including form submission, basic http authentication, cookies and automatic page redirection, and allows Java test code to examine returned pages as text, an XML DOM, or containers of forms, tables, and links. Includes ServletUnit to test servlets without a servlet container.
iOpus Internet Macros - Macro recorder utility from iOpus Inc. automates repetitious aspects of web site testing. Records any combination of browsing, form filling, clicking, script testing and information gathering; assists user during the recording with visual feedback. Power users can manually edit a recorded macro. A command line interface allows for easy integration with other test software. Works by remote controlling the browser, thus automatically supports advanced features such as SSL, HTTP-Redirects and cookies. Can handle data input from text files, databases, or XML. Can extract web data and save as CSV file or process the data via a script. For Windows and MSIE.
MaxQ - Free open-source web functional testing tool from Tigris.org, written in Java. Works as a proxy server; includes an HTTP proxy recorder to automate test script generation, and a mechanism for playing tests back from the GUI and command line. Jython is used as the scripting language, and JUnit is used as the testing library.
TestDrive-Gold - Test tool from Original Software Group Ltd. utilizes a new approach to recording/playback of web browser scripts. It analyses the underlying intentions of the script and executes it by direct communication with web page elements. IntelliScripting logic removes the reliance on specific browser window sizes, component location and mouse movements for accurate replay, and for easier script maintenance; supports hyperlinks targeted at new instances of browser. Playback can run in background while other tasks are performed on the same machine.
Compuware TestPartner - Automated software testing tool from Compuware designed specifically to validate Windows, Java, and web-based applications. The 'TestPartner Visual Navigator' can create visual-based tests, or MS VBA can be used for customized scripting.
WebKing - Web site functional, load, and static analysis test suite from ParaSoft. Maps and tests all possible paths through a dynamic site; can enforce over 200 HTML, CSS, JavaScript, 508 compliance, WML and XHTML coding standards or customized standards. Allows creation of rules for automatic monitoring of dynamic page content. Can run load tests based on the tool's analysis of web server log files. For Windows, Linux, Solaris.
eValid - Web functional test tool from Software Research Inc. Browser-centric view simplifies test recording and editing, and replays user activity with accuracy by combining browser-internal data, timers, event counters, and direct DOM access. Can be used for AJAX-based web development methodologies. The built-in test suite management system eV.Manager controls test suite structure, runs tests automatically, records detailed logs and pass/fail statistics, and can handle hundreds of thousands of tests.
Rational Functional Tester - IBM's (formerly Rational's) automated tool for testing of Java, .NET, and web-based applications. Enables data-driven testing, choice of scripting languages and editors. For Windows and Linux.
QuickTest Pro - Functional/regression test tool from HP (formerly Mercury); keyword-driven; includes support for testing Web, Java, ERP, etc.
QA Center Test Partner - Functional/regression tool from Compuware for testing of web, Java, and other applications. Handles ActiveX, HTML, DHTML, XML, Java beans, and more.
SilkTest - Functional test tool from Borland (formerly Segue) for Web, Java or traditional client/server-based applications. Features include: test creation and customization, test planning and management, direct database access and validation, recovery system for unattended testing, and IDE for developing, editing, compiling, running, and debugging scripts, test plans, etc.
Return to top of web tools listing

Web Site Security Test Tools
Fortify 360 - Security product from Fortify Software Inc. includes vulnerability detection. Integrates static source code analysis, dynamic runtime analysis, and real-time monitoring to identify and accurately prioritize the greatest number of critical security vulnerabilities. Capabilities include the Program Trace Analyzer (PTA) that finds vulnerabilities that become apparent only while an application is running - integrate into a QA test to find vulnerabilities while a functional test is being conducted on an application.
OWASP Security Testing Tools - Variety of free and open source web security testing tools via the OWASP (Open Web Application Security Project) site. SQLiX is an SQL injection vulnerability test tool that uses multiple techniques - conditional errors injection; blind injection based on integers, strings or statements, MS-SQL verbose error messages ("taggy" method); can identify database version and gather info for MS-Access, MS-SQL, MySQL, Oracle and PostgreSQL. Other security testing tools available include WebScarab, Tiger, LAPSE, Pantera, etc.
Retina Web Security Scanner - Vulnerability scanning tool from eEye Inc. for large, complex web sites and web applications. Identifies application vulnerabilities as well as site exposure risk, ranks threat priority, produces graphical, intuitive HTML reports, and indicates site security posture by vulnerabilities and threat level. Also performs an advanced site analysis on site structure, content and configuration to identify inherent exposure to future or emerging threats.
Hailstorm - Automated web security testing tool from Cenzic Inc.; customize and configure tests based on requirements, or use pre-sets for quick assessments. Capabilities include: prioritize vulnerabilities with a quantitative score called HARM; easy-to-use wizard-based interface; 'SmartAttacks' library, updated frequently; comprehensive reports with detailed remediation information and export capabilities; administrator control over user roles, tasks and privileges. Enterprise, Pro, Core, and Starter versions.
GamaSec - Automated online website vulnerability assessment delivers proactive tests to Web Servers, Web-interfaced Systems, and Web-based Applications. Configurable scan intervals/frequency. Supports a wide variety of HTTP Authentication schemes, common HTTP protocol, BASIC, NTLM with abilities to analyze the broadest web technologies; PHP, ASP.NET, ASP, etc.
Wikto - Web server security assessment tool for windows servers, open source, from SensePost. It's three main sections are its Back-End miner, Nikto-like functionality, and Googler to obtain additional directories for use by the other two. Includes ability to export results to CSV file
Nikto Scanner - Open source web server scanner from CIRT.net which performs comprehensive tests against web servers for multiple items, including over 3300 potentially dangerous files/CGIs, versions on over 625 servers, and version specific problems on over 230 servers. Scan items and plugins are frequently updated and can be automatically updated.
HP WebInspect - WebInspect automated security assessment tool for web applications and services, from HP (Formely SPI Dynamics). Identifies known and unknown vulnerabilities, includes checks that validate proper web server configuration. Capabilities includes discovery of all XML input parameters and parameter manipulation on each XML field looking for vulnerabilities within the service itself. Requires Windows and MSIE.
AppScan - Tool suite from Rational/IBM (formerly Watchfire) automates web application security testing, produces defect analyses, and offers recommendations for fixing detected security flaws. Assessment module can be used by auditors and compliance officers to conduct comprehensive audits, and to validate compliance with security requirements.
Acunetix Web Vulnerability Scanner - Web site security testing tool from Acunetix first identifies web servers from a particular IP or IP range. It then crawls entire site, gathering information about every file it finds, and displaying website structure. After this discovery stage, it performs an automatic audit for common security issues. Applications utilizing CGI, PHP, ASP, ASP.NET can all be tested for vulnerabilities such as cross site scripting, SQL injection, CRLF injection, code execution, directory traversal and more. Requires Windows and MSIE.
Defensics Core Internet Test Suite - Security testing tool from Codenomicon Onc. searches and pre-emptively eliminates security-related flaws from the implementations that create the backbone of the modern Internet and communication between the networked devices. This includes, but is not limited to, routers, switches, firewalls, desktop and server systems, laptops, PDAs, cell phones and other mobile systems, as well as a large number of various embedded systems. Because several protocols from this category are often tightly coupled with the underlying operating system, serious flaws in handling them may easily result in total system compromises.
Perimeter Check - SecurityMetrics 'Perimeter Check' service analyzes external network devices like servers, websites, firewalls, routers, and more for security vulnerabilities which may lead to interrupted service, data theft or system destruction. Includes instructions to help immediately remedy security problems. Can automatically schedule vulnerability assessment of designated IP addresses during low traffic times.
Core Impact Pro - Security testing tool from Core Security Technologies for web apps and other systems. Uses penetration testing techniques to safely identify exposures to critical, emerging threats and trace complex attack paths
C5 Compliance Platform - Security testing apliance from SecureElements Inc. for determining security and compliance status across heterogeneous systems. Identifies security vulnerabilities, finds compliance exposures, evaluates and matches exposures with fixes, provides ready to deploy remediations and enforcement actions, and summarized or detailed views of monitored assets, information security exposures, and compliance risks.
Snort - Open source network intrusion prevention and detection system from Sourcefire Inc.; uses a rule-driven language, which combines the benefits of signature, protocol and anomaly based inspection methods. Can perform protocol analysis, content searching/matching and can be used to detect a variety of attacks and probes, such as buffer overflows, stealth port scans, CGI attacks, SMB probes, OS fingerprinting attempts, and much more.
SecurityMetrics Appliance - Integrated software and hardware device includes Intrusion Detection and Prevention Systems and Vulnerability Assessment. Operates as a Layer 2 Bridge - no network configuration needed. Automatically downloads latest IDS attack signatures, vulnerability assessment scripts and program enhancements nightly.
Nessus - Vulnerability scanner from Tenable Network Security with high speed discovery, configuration auditing, asset profiling, sensitive data discovery and vulnerability analysis of security posture. Nessus scanners can be distributed throughout an entire enterprise, inside DMZs, and across physically separate networks. Free to download and subscriptions for vulnerability updates are free for home users; annual fee for Professional license. Updated continuously. Includes scripting language for writing custom plugins.
Security Center - Security management tool from Tenable Network Security for asset discovery, vulnerability detection, event management and compliance reporting for small and large enterprises. Includes management of vulnerability, compliance, intrusion and log data. Company also provides the Nessus Vulnerability Scanner, and Passive Vulnerability Scanner.
SARA - 'Security Auditor's Research Assistant' Unix-based security analysis tool from Advanced Research Corp. Supports the FBI/SANS Top 20 Consensus; remote self scan and API facilities; plug-in facility for third party apps; SANS/ISTS certified, updated bi-monthly; CVE standards support; based on the SATAN model. Freeware. Also available is 'Tiger Analytical Research Assistant' (TARA), an upgrade to the TAMU 'tiger' program - a set of scripts that scan a Unix system for security problems.
Qualys Free Security Scans - Several free security scan services from Qualys, Inc. including SANS/FBI Top 20 Vulnerabilities Scan, network security scan, and browser checkup tool.
GFiLANguard - Network vulnerability and port scanner, patch management and network auditing tool from GFI Software. Scans using vulnerability check databases based on OVAL and SANS Top 20, providing thousands of vulnerability assessments.
Qualys Guard - Online service that does remote network security assessments; provides proactive 'Managed Vulnerability Assessment', inside and outside the firewall,
PatchLink Scan - Stand-alone network-based scanning solution from Lumension Security that performs a comprehensive external scan of all of the devices on your network, including servers, desktop computers, laptops, routers, printers, switches and more; risk-based prioritization of identified threats; continuously updated vulnerability database for orderly remediation; comprehensive reports of scan results
Secure-Me - Automated security test scanning service from Broadbandreports.com for individual machines. Port scans, denial-of-service checks, 45 common web server vulnerability checks, web server requests-per-second benchmark, and a wide variety of other tests. Limited free or full licensed versions available.
SAINT - Security Administrator's Integrated Network Tool - Security testing tool from SAINT Corporation. An updated and enhanced version of the SATAN network security testing tool. Updated regularly; CVE compatible. Includes DoS testing, reports specify severity levels of problems. Single machine or full network scans. Also available is 'WebSAINT' self-guided scanning service, and SAINTbox scanner appliance. Runs on many UNIX flavors.
NMap Network Mapper - Free open source utility for network exploration or security auditing; designed to rapidly scan large networks or single hosts. Uses raw IP packets in novel ways to determine what hosts are available on the network, what services (ports) they are offering, what operating system (and OS version) they are running, what type of packet filters/firewalls are in use, and many other characteristics. Runs on most flavors of UNIX as well as Windows.
NetIQ Security Analyzer - Multi-platform vulnerability scanning and assessment product. Systems are analyzed on demand or at scheduled intervals. Automatic update service allows updating with latest security tests. Includes a Software Developer's Kit to allow custom security test additions. For Windows/Solaris/Linux

Posted by at No comments:
Subscribe to: Posts (Atom)