13 citations · 35 across the 12 of their papers we have counts for
12 papers
Using OAI Overlay to Enhance REST API Fuzzing
Omur Sahin, Man Zhang, Alexander Poth +6
REST APIs are widely used in industry. Therefore, a lot of research has been focused on how to automatically generate test cases for REST APIs, with few different open-source fuzze…
MASTOR: A Multi-Agent Approach to Semantic Test Oracle Generation for RESTful APIs
Sida Deng, Rubing Huang, Zhenzhen Yang +3
Existing automated RESTful API testing approaches commonly rely on simple checks (e.g., HTTP status codes, schema conformance), which are insufficient for detecting semantic faults…
Enhancing REST API Fuzzing with Access Policy Violation Checks and Injection Attacks
Omur Sahin, Man Zhang, Andrea Arcuri
Due to their widespread use in industry, several techniques have been proposed in the literature to fuzz REST APIs. Existing fuzzers for REST APIs have been focusing on detecting c…
WFC/WFD: Web Fuzzing Commons, Dataset and Guidelines to Support Experimentation in REST API Fuzzing
Omur Sahin, Man Zhang, Andrea Arcuri
Fuzzing REST APIs is an important research problem, with practical applications and impact in industry. As such, a lot of research work has been carried out on this topic in the la…
Search-Based Fuzzing For RESTful APIs That Use MongoDB
Hernan Ghianni, Man Zhang, Juan P. Galeotti +1
In RESTful APIs, interactions with a database are a common and crucial aspect. When generating whitebox tests, it is essential to consider the database's state (i.e., the data cont…
Causes and Effects of Fitness Landscapes in System Test Generation: A Replication Study
Omur Sahin, Man Zhang, Andrea Arcuri
Search-Based Software Testing (SBST) has seen several success stories in academia and industry. The effectiveness of a search algorithm at solving a software engineering problem st…
Advanced White-Box Heuristics for Search-Based Fuzzing of REST APIs
Andrea Arcuri, Man Zhang, Juan Pablo Galeotti
Due to its importance and widespread use in industry, automated testing of REST APIs has attracted major interest from the research community in the last few years. However, most o…
Testing RESTful APIs: A Survey
Amid Golmohammadi, Man Zhang, Andrea Arcuri
In industry, RESTful APIs are widely used to build modern Cloud Applications. Testing them is challenging, because not only they rely on network communications, but also they deal…
White-Box and Black-Box Fuzzing for GraphQL APIs
Asma Belhadi, Man Zhang, Andrea Arcuri
The Graph Query Language (GraphQL) is a powerful language for APIs manipulation in web services. It has been recently introduced as an alternative solution for addressing the limit…
White-box Fuzzing RPC-based APIs with EvoMaster: An Industrial Case Study
Man Zhang, Andrea Arcuri, Yonggang Li +2
Remote Procedure Call (RPC) is a communication protocol to support client-server interactions among services over a network. RPC is widely applied in industry for building large-sc…
Fuzzing Microservices: A Series of User Studies in Industry on Industrial Systems with EvoMaster
Man Zhang, Andrea Arcuri, Yonggang Li +5
With several microservice architectures comprising of thousands of web services, used to serve 630 million customers, companies like Meituan face several challenges in the verifica…
Open Problems in Fuzzing RESTful APIs: A Comparison of Tools
Man Zhang, Andrea Arcuri
RESTful APIs are a type of web services that are widely used in industry. In the last few years, a lot of effort in the research community has been spent in designing novel techniq…