6 citations · 11 across the 7 of their papers we have counts for
8 papers
Automated Testing of Broken Authentication Vulnerabilities in Web APIs with AuthREST
Davide Corradini, Mariano Ceccato, Mohammad Ghafari
We present AuthREST, an open-source security testing tool targeting broken authentication, one of the most prevalent API security risks in the wild. AuthREST automatically tests we…
How Do Solidity Versions Affect Vulnerability Detection Tools? An Empirical Study
Gerardo Iuliano, Davide Corradini, Michele Pasqua +2
Context: Smart contract vulnerabilities pose significant security risks for the Ethereum ecosystem, driving the development of automated tools for detection and mitigation. Smart c…
DeepREST: Automated Test Case Generation for REST APIs Exploiting Deep Reinforcement Learning
Davide Corradini, Zeno Montolli, Michele Pasqua +1
Automatically crafting test scenarios for REST APIs helps deliver more reliable and trustworthy web-oriented systems. However, current black-box testing approaches rely heavily on…
Mining REST APIs for Potential Mass Assignment Vulnerabilities
Arash Mazidi, Davide Corradini, Mohammad Ghafari
REST APIs have a pivotal role in accessing protected resources. Despite the availability of security testing tools, mass assignment vulnerabilities are common in REST APIs, leading…
Automated Black-box Testing of Mass Assignment Vulnerabilities in RESTful APIs
Davide Corradini, Michele Pasqua, Mariano Ceccato
Mass assignment is one of the most prominent vulnerabilities in RESTful APIs. This vulnerability originates from a misconfiguration in common web frameworks, such that naming conve…
Restats: A Test Coverage Tool for RESTful APIs
Davide Corradini, Amedeo Zampieri, Michele Pasqua +1
Test coverage is a standard measure used to evaluate the completeness of a test suite. Coverage is typically computed on source code, by assessing the extent of source code entitie…
Empirical Comparison of Black-box Test Case Generation Tools for RESTful APIs
Davide Corradini, Amedeo Zampieri, Michele Pasqua +1
In literature, we can find research tools to automatically generate test cases for RESTful APIs, addressing the specificity of this particular programming domain. However, no direc…
A Framework for In-Vivo Testing of Mobile Applications
Mariano Ceccato, Davide Corradini, Luca Gazzola +4
The ecosystem in which mobile applications run is highly heterogeneous and configurable. All layers upon which mobile apps are built offer wide possibilities of variations, from th…