2 citations · 3 across the 11 of their papers we have counts for
12 papers · 1 filter
Detecting HTTP Status Code Misuses in REST APIs via Static and Dynamic Analysis
Alix Decrop, Andrea Arcuri, Mike Papadakis +2
REST APIs are widely used on the web for client-server communications. As REST is based on HTTP, server responses contain status codes to indicate the outcome of requests (e.g., 20…
Validating HTTP Semantics in REST APIs With Constructed Call Sequence Scenarios
Omur Sahin, Andrea Arcuri
Context: REST APIs are widely used in industry. These APIs use HTTP for their communications. Failures in following the specifications of HTTP can lead to confusing and hard to use…
Using OAI Overlay to Enhance REST API Fuzzing
Omur Sahin, Man Zhang, Alexander Poth +6
REST APIs are widely used in industry. Therefore, a lot of research has been focused on how to automatically generate test cases for REST APIs, with few different open-source fuzze…
Enhancing REST API Fuzzing with Access Policy Violation Checks and Injection Attacks
Omur Sahin, Man Zhang, Andrea Arcuri
Due to their widespread use in industry, several techniques have been proposed in the literature to fuzz REST APIs. Existing fuzzers for REST APIs have been focusing on detecting c…
Detecting and Mitigating Flakiness in REST API Fuzzing
Man Zhang, Chongyang Shen, Andrea Arcuri +1
Test flakiness is a common problem in industry, which hinders the reliability of automated build and testing workflows. Most existing research on test flakiness has primarily focus…
Fuzzing Microservices in Face of Intrinsic Uncertainties
Man Zhang, Tao Yue, Andrea Arcuri
The widespread adoption of microservices has fundamentally transformed how modern software systems are designed, deployed, operated and maintained. However, well-known microservice…
Generating REST API Tests With Descriptive Names
Philip Garrett, Juan P. Galeotti, Andrea Arcuri +2
Automated test generation has become a key technique for ensuring software quality, particularly in modern API-based architectures. However, automatically generated test cases are…
WFC/WFD: Web Fuzzing Commons, Dataset and Guidelines to Support Experimentation in REST API Fuzzing
Omur Sahin, Man Zhang, Andrea Arcuri
Fuzzing REST APIs is an important research problem, with practical applications and impact in industry. As such, a lot of research work has been carried out on this topic in the la…
Search-Based Fuzzing For RESTful APIs That Use MongoDB
Hernan Ghianni, Man Zhang, Juan P. Galeotti +1
In RESTful APIs, interactions with a database are a common and crucial aspect. When generating whitebox tests, it is essential to consider the database's state (i.e., the data cont…
A Survey on Web Testing: On the Rise of AI and Applications in Industry
Iva Kertusha, Gebremariem Assress, Onur Duman +1
Web application testing is an essential practice to ensure the reliability, security, and performance of web systems in an increasingly digital world. This paper presents a systema…
Causes and Effects of Fitness Landscapes in System Test Generation: A Replication Study
Omur Sahin, Man Zhang, Andrea Arcuri
Search-Based Software Testing (SBST) has seen several success stories in academia and industry. The effectiveness of a search algorithm at solving a software engineering problem st…
Advanced White-Box Heuristics for Search-Based Fuzzing of REST APIs
Andrea Arcuri, Man Zhang, Juan Pablo Galeotti
Due to its importance and widespread use in industry, automated testing of REST APIs has attracted major interest from the research community in the last few years. However, most o…