paperbot · PL 论文追踪

全部论文 待读 收藏

P2 Widening The Adoption of Web API Fuzzing: Docker, GitHub Action and Python Support for EvoMaster

扩大 Web API 模糊测试的采用:EvoMaster 的 Docker、GitHub Action 与 Python 支持
FSE Proceedings of the 33rd ACM International Conference on the Foundations of Software Engineering2025匹配度 1/10 · 该论文是 Web API 模糊测试工具 EvoMaster 的工程化落地介绍,属于测试与 CI 集成方向,与用户核心关注的静态分析、LLM/Agent、浮点程序分析和贝叶斯程序分析没有直接关系;仅在“工业落地”偏好上有微弱交集。引用 5 inbox
Andrea Arcuri, Philip Garrett, Juan Pablo Galeotti, Man Zhang
crossref: 2026-09-12dblp: 2026-09-12

AI 速览

一句话:介绍 EvoMaster 的最新工业落地特性:Docker 发布、GitHub Actions 集成与 Python 测试用例输出。

Web API(如 REST、GraphQL 与 RPC)在工业界被广泛使用,近年学术界涌现出大量面向该领域的测试自动化与模糊测试研究。EvoMaster 是当前最先进的基于搜索的 Web API 模糊测试器,自 2016 年起持续开发,并已在美团、大众汽车等企业实际使用。本文介绍并讨论 EvoMaster 最新的若干技术特性,旨在扩大其在工业界的采用:以 Docker 形式发布、在 GitHub Actions 等持续集成环境中的使用方式,以及对 Python 格式测试用例输出的支持。这些工作有助于将学术研究成果更好地转移到工业实践中,作者还提供了展示这些新特性的视频。

问题
Web API 模糊测试研究虽多,但学术成果向工业实践转移仍面临部署与集成门槛。
方法
通过为 EvoMaster 增加 Docker 发布、GitHub Actions 持续集成支持以及 Python 测试用例输出等工程特性来降低使用门槛。
评估
本文以工具特性描述与演示为主,未给出新的实验评估;通过已部署的企业用例和演示视频说明其可用性与技术转移效果。
原文摘要(Abstract)

Web APIs, like for example REST, GraphQL and RPC APIs, are widely used in industry. Due to their importance, a lot of research work has been carried out in the recent years on test automation in this domain. Several fuzzers have been developed and evaluated in the research literature. EvoMaster is a state-of-the-art, search-based fuzzer for Web APIs. It is in active development, since 2016, and it is used in several enterprises around the world, like for example at Meituan and Volkswagen. In this paper, we present and discuss its most recent technical features, aimed at widening its adoption in industry. In particular, we discuss its release on Docker, its use in Continuous Integration environments such as GitHub Actions, and the support for test case outputs in Python. This enables us a better technology transfer from academic results to industrial practice. A video showcasing these new features is currently available at: https://youtu.be/l1ybs7SjvcA

链接与引用

DOI 原文 · DBLP

BibTeX
@inproceedings{ArcuriGG025,
  title = {Widening The Adoption of Web API Fuzzing: Docker, GitHub Action and Python Support for EvoMaster},
  author = {Andrea Arcuri and Philip Garrett and Juan Pablo Galeotti and Man Zhang},
  booktitle = {FSE},
  year = {2025},
  doi = {10.1145/3696630.3728586}
}