• Enhancing Search-based Testing with Testability Transformations for Existing APIs 

      Arcuri, Andrea; Galeotti, Juan Pablo (ACM Transactions on Software Engineering and Methodology;Volume 31, Issue 1, Peer reviewed; Journal article, 2021-09-28)
      Search-based software testing (SBST) has been shown to be an effective technique to generate test cases automatically. Its effectiveness strongly depends on the guidance of the fitness function. Unfortunately, a common ...
    • JavaScript SBST Heuristics to Enable Effective Fuzzing of NodeJS Web APIs 

      Zhang, Man; Belhadi, Asma; Arcuri, Andrea (Peer reviewed; Journal article, 2023)
      JavaScript is one of the most popular programming languages. However, its dynamic nature poses several challenges to automated testing techniques. In this paper, we propose an approach and open-source tool support to enable ...
    • Open Problems in Fuzzing RESTful APIs: A Comparison of Tools 

      Zhang, Man; Arcuri, Andrea (Peer reviewed; Journal article, 2023)
      RESTful APIs are a type of web service that are widely used in industry. In the past few years, a lot of effort in the research community has been spent in designing novel techniques to automatically fuzz those APIs to ...
    • Testing RESTful APIs: A Survey 

      Golmohammadi, Amid; Zhang, Man; Arcuri, Andrea (Peer reviewed; Journal article, 2023)
      In industry, RESTful APIs are widely used to build modern Cloud Applications. Testing them is challenging,because not only do they rely on network communications, but also they deal with external services likedatabases. ...
    • White-box Fuzzing RPC-based APIs with EvoMaster: An Industrial Case Study 

      Zhang, Man; Arcuri, Andrea; Li, Yonggang; liu, yang; Xue, Kaiming (Peer reviewed; Journal article, 2023)
      Remote Procedure Call (RPC) is a communication protocol to support client-server interactions among services over a network. RPC is widely applied in industry for building large-scale distributed systems, such as Microservices. ...