6 papers
Using OAI Overlay to Enhance REST API Fuzzing
Omur Sahin, Man Zhang, Alexander Poth +6
REST APIs are widely used in industry. Therefore, a lot of research has been focused on how to automatically generate test cases for REST APIs, with few different open-source fuzze…
MASTOR: A Multi-Agent Approach to Semantic Test Oracle Generation for RESTful APIs
Sida Deng, Rubing Huang, Zhenzhen Yang +3
Existing automated RESTful API testing approaches commonly rely on simple checks (e.g., HTTP status codes, schema conformance), which are insufficient for detecting semantic faults…
Enhancing REST API Fuzzing with Access Policy Violation Checks and Injection Attacks
Omur Sahin, Man Zhang, Andrea Arcuri
Due to their widespread use in industry, several techniques have been proposed in the literature to fuzz REST APIs. Existing fuzzers for REST APIs have been focusing on detecting c…
WFC/WFD: Web Fuzzing Commons, Dataset and Guidelines to Support Experimentation in REST API Fuzzing
Omur Sahin, Man Zhang, Andrea Arcuri
Fuzzing REST APIs is an important research problem, with practical applications and impact in industry. As such, a lot of research work has been carried out on this topic in the la…
Search-Based Fuzzing For RESTful APIs That Use MongoDB
Hernan Ghianni, Man Zhang, Juan P. Galeotti +1
In RESTful APIs, interactions with a database are a common and crucial aspect. When generating whitebox tests, it is essential to consider the database's state (i.e., the data cont…
Causes and Effects of Fitness Landscapes in System Test Generation: A Replication Study
Omur Sahin, Man Zhang, Andrea Arcuri
Search-Based Software Testing (SBST) has seen several success stories in academia and industry. The effectiveness of a search algorithm at solving a software engineering problem st…