AutomationSTAR

Test Automation Conference Europe

Track Talk W6

Fuzz Testing Web APIs: Overview of Existing Tools

Andrea Arcuri

16.00-16.45, Wednesday 9th October

Verifying the correctness of Web APIs is an expensive, tedious task.

For example, writing test cases to send HTTP requests and verify the responses returned from the APIs requires expertise and time. Automatically generating test cases to find faults and cover requirements would hence be highly beneficial.

In the last few years, advances in Artificial Intelligence techniques have led to few open-source tools that can be used for this task, like EvoMaster, Restler and Schemathesis.

But most testers and developers in industry are still not aware of these existing solutions. This talk will summarise the current state-of-the-art on this exciting testing automation problem, discussing their strengths and limitations. We will briefly as well discuss our direct experience in introducing these techniques in large enterprises such as Meituan and Volkswagen.

BACK TO PROGRAMME

What you will Learn

  1. Fuzzing Web APIs can be already tried today, with open-source tools
  2. Trying out a fuzzer on an OpenAPI schema takes just a few minutes
  3. It is quite easy to find bugs when sending unexpected inputs with a fuzzer

Session Details

  • Introductory
  • 45 mins
  • Includes 15 mins Q&A
Buy Conference Ticket

Session Speaker

Andrea Arcuri

Professor - Kristiania, Norway

Prof. Andrea Arcuri is a Professor of Software Engineering at Kristiania University College and Oslo Metropolitan University, Oslo, Norway, where he teaches courses on enterprise and web development. His main research interests are in software testing, especially test case generation using evolutionary algorithms. Having worked 5 years in industry as a senior engineer, a main focus of his research is to design novel research solutions that can actually be used in practice. Prof. Arcuri is the main-author of EvoMaster and a co-author of EvoSuite, which are open-source tools that can automatically generate test cases using evolutionary algorithms.