Trailblazer: Practical End-to-end Web API Fuzzing (Registered Report)
There are two key challenges in automatically testing web APIs: (a) determine where to send API requests and (b) identify how to make a valid payload for a given request. Both challenges are sometimes addressed by the presence of a machine-parseable API specification (such as an OpenAPI specification). However, most web applications lack such a specification—making automatic testing hard.
Authors
- Toby Murray (ORCID: https://orcid.org/0000-0002-8271-0289)
- Lianglu Pan (ORCID: https://orcid.org/0009-0005-8803-1008)
- Van-Thuan Pham (ORCID: https://orcid.org/0000-0002-9871-3695)
- Shaanan Cohney (ORCID: https://orcid.org/0000-0002-0890-6590)
Institutions
- The University of Melbourne (AU)
Publication Details
- Published
- 2025-06-06
- DOI
- https://doi.org/10.1145/3713081.3731717
- Primary Topic
- Web Data Mining and Analysis
- Type
- article
- Field-Weighted Citation Impact
- 0.00
Funders
- Australian Research Council