Fuzz Testing Web APIs: Overview of Existing Tools
Andrea Arcuri
Professor - Kristiania, Norway
Verifying the correctness of Web APIs is an expensive, tedious task.
For example, writing test cases to send HTTP requests and verify the responses returned from the APIs requires expertise and time. Automatically generating test cases to find faults and cover requirements would hence be highly beneficial.
In the last few years, advances in Artificial Intelligence techniques have led to few open-source tools that can be used for this task, like EvoMaster, Restler and Schemathesis.
But most testers and developers in industry are still not aware of these existing solutions. This talk will summarise the current state-of-the-art on this exciting testing automation problem, discussing their strengths and limitations. We will briefly as well discuss our direct experience in introducing these techniques in large enterprises such as Meituan and Volkswagen.
What you will Learn
- Fuzzing Web APIs can be already tried today, with open-source tools
- Trying out a fuzzer on an OpenAPI schema takes just a few minutes
- It is quite easy to find bugs when sending unexpected inputs with a fuzzer
Join Europe’s biggest testing event! If you enjoyed this content, get ready for a mind-blowing experience in person. EuroSTAR Conference is 4 days off learning from expert speakers, bold ideas, real insights and powerful connections.
And if you work in Test Automation, join your peers at AutomationSTAR. This is the conference where the brightest minds shape the future of quality engineering, with 2 action packed days of hands-on learning.
About Me!
Prof. Andrea Arcuri is a Professor of Software Engineering at Kristiania University College and Oslo Metropolitan University, Oslo, Norway, where he teaches courses on enterprise and web development. His main research interests are in software testing, especially test case generation using evolutionary algorithms. Having worked 5 years in industry as a senior engineer, a main focus of his research is to design novel research solutions that can actually be used in practice. Prof. Arcuri is the main-author of EvoMaster and a co-author of EvoSuite, which are open-source tools that can automatically generate test cases using evolutionary algorithms.