Work

Trailblazer: Practical End-to-end Web API Fuzzing (Registered Report)

Year: 2025

Type: conference-paper

Abstract: There are two key challenges in automatically testing web APIs: (a) determine where to send API requests and (b) identify how to make a valid payload for a given request. Both challenges are sometimes addressed by the presence of a machine-parseable API specification (such as an OpenAPI specification). However, most web applications lack such a specification—making automatic testing hard.

Source: ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA)

DOI: 10.1145/3713081.3731717

Authors: Lianglu Pan, Shaanan Cohney, Toby Murray, Van-Thuan Pham

Institution: The University of Melbourne

Language: English

Topic: Software Testing and Debugging Techniques

Subfield: Software

Field: Computer Science

Domain: Physical Sciences

Open Access status: hybrid

Funder: Australian Research Council

Award: Effective integration of human and automated analyses for security testing