Artículo

Tool report: EvoMaster—black and white box search-based fuzzing for REST, GraphQL and RPC APIs

Arcuri, Andrea; Zhang, Man; Seran, Susruthan; Galeotti, Juan PabloIcon ; Golmohammadi, Amid; Duman, Onur; Aldasoro, Agustina; Ghianni, Hernan
Fecha de publicación: 11/2024
Editorial: Springer
Revista: Automated Software Engineering
ISSN: 0928-8910
Idioma: Inglés
Tipo de recurso: Artículo publicado
Clasificación temática:

Resumen

In this paper, we present the latest version 3.0.0 of EVOMASTER, an open-source search-based fuzzer aimed at Web APIs. We discuss and present all its recent improvements, including advanced white-box heuristics, advanced search algorithms, support for databases and external services, as well as dealing with GraphQL and RPC APIs besides the original use case for REST APIs. The tool’s installers have been downloaded more than 3000 times. EVOMASTER is in daily use for fuzzing millions of lines of code in hundreds of APIs in large Fortune 500 companies, such as for example the e-commerce Meituan.
Palabras clave: Fuzzing , SBST , Web API , Tool
 
Archivos asociados
Thumbnail
 
Tamaño: 1.161Mb
Formato: PDF
.
Licencia
info:eu-repo/semantics/openAccess Excepto donde se diga explícitamente, este item se publica bajo la siguiente descripción: Creative Commons Attribution 2.5 Unported (CC BY 2.5)
Identificadores
URI: http://hdl.handle.net/11336/261492
URL: https://link.springer.com/10.1007/s10515-024-00478-1
DOI: http://dx.doi.org/10.1007/s10515-024-00478-1
Colecciones
Articulos(ICC)
Articulos de INSTITUTO DE INVESTIGACION EN CIENCIAS DE LA COMPUTACION
Citación
Arcuri, Andrea; Zhang, Man; Seran, Susruthan; Galeotti, Juan Pablo; Golmohammadi, Amid; et al.; Tool report: EvoMaster—black and white box search-based fuzzing for REST, GraphQL and RPC APIs; Springer; Automated Software Engineering; 32; 1; 11-2024; 1-11
Compartir
Altmétricas