paperbot · PL 论文追踪

全部论文 待读 收藏

P2 Morest: Industry Practice of Automatic RESTful API Testing

Morest:自动 RESTful API 测试的工业实践
ASE Proceedings of the 37th IEEE/ACM International Conference on Automated Software Engineering2022匹配度 2/10 · 论文主题是RESTful API自动测试的工业实践,属于软件工程/测试方向,与用户关注的静态分析、LLM/Agent、浮点程序分析、贝叶斯程序分析等核心方向无直接关联;仅在工业落地和缺陷发现偏好上有微弱交集。引用 7 inbox
Yi Liu, Yuekang Li, Yang Liu, Ruiyuan Wan, Runchao Wu, Qingkun Liu
crossref: 2026-09-12

AI 速览

一句话:提出并工业落地自动 RESTful API 测试框架 Morest,在华为测试十个服务并发现83个新缺陷。

随着 RESTful API 在云服务中的广泛使用,对 RESTful API 进行测试变得至关重要。已有研究提出了若干自动测试技术,但工业实践中的效果与限制仍缺乏系统报告。本文介绍华为设计并实现的自动 RESTful API 测试框架 Morest。该框架被用于测试十个真实 RESTful API 服务,共发现 83 个此前未知的缺陷,且全部得到开发者确认并修复。结果表明 Morest 在检测 RESTful API 缺陷方面具有较强能力;同时作者也指出,将自动 RESTful API 测试技术应用于实践时,人工投入仍然不可避免且非常重要。

问题
在工业环境中,如何有效应用自动 RESTful API 测试技术来发现真实服务中此前未知的缺陷。
方法
在华为设计并实现自动 RESTful API 测试框架 Morest,并将其部署到真实 RESTful API 服务进行实践评估。
评估
将 Morest 用于测试十个 RESTful API 服务,发现 83 个先前未知缺陷且均被确认修复,并总结了工业实践中人工投入的重要性。
原文摘要(Abstract)

Many big companies are providing cloud services through RESTful APIs nowadays. With the growing popularity of RESTful API, testing RESTful API becomes crucial. To address this issue, researchers have proposed several automatic RESTful API testing techniques. At Huawei, we design and implement an automatic RESTful API testing framework named Morest. Morest has been used to test ten RESTful API services and helped to detected 83 previously unknown bugs which were all confirmed and fixed by the developers. On one hand, we find that Morest shows great capability of detecting bugs in RESTful API s. On the other hand, we also notice that human effort is inevitable and important when applying automatic RESTful API techniques in practice.

链接与引用

DOI 原文 · PDF(开放获取) ·

BibTeX
@inproceedings{paperbot7153,
  title = {Morest: Industry Practice of Automatic RESTful API Testing},
  author = {Yi Liu and Yuekang Li and Yang Liu and Ruiyuan Wan and Runchao Wu and Qingkun Liu},
  booktitle = {ASE},
  year = {2022},
  doi = {10.1145/3551349.3559498}
}