一句话:提出并工业落地自动 RESTful API 测试框架 Morest,在华为测试十个服务并发现83个新缺陷。
随着 RESTful API 在云服务中的广泛使用,对 RESTful API 进行测试变得至关重要。已有研究提出了若干自动测试技术,但工业实践中的效果与限制仍缺乏系统报告。本文介绍华为设计并实现的自动 RESTful API 测试框架 Morest。该框架被用于测试十个真实 RESTful API 服务,共发现 83 个此前未知的缺陷,且全部得到开发者确认并修复。结果表明 Morest 在检测 RESTful API 缺陷方面具有较强能力;同时作者也指出,将自动 RESTful API 测试技术应用于实践时,人工投入仍然不可避免且非常重要。
Many big companies are providing cloud services through RESTful APIs nowadays. With the growing popularity of RESTful API, testing RESTful API becomes crucial. To address this issue, researchers have proposed several automatic RESTful API testing techniques. At Huawei, we design and implement an automatic RESTful API testing framework named Morest. Morest has been used to test ten RESTful API services and helped to detected 83 previously unknown bugs which were all confirmed and fixed by the developers. On one hand, we find that Morest shows great capability of detecting bugs in RESTful API s. On the other hand, we also notice that human effort is inevitable and important when applying automatic RESTful API techniques in practice.