Most modern cloud and web services are programmatically accessed through REST APIs.
This paper discusses how an attacker might compromise a service by exploiting …

This paper introduces RESTler, the first stateful REST API fuzzer. RESTler analyzes the API
specification of a cloud service and generates sequences of requests that automatically test …

The cloud runs on REST APIs. In this paper, we study how to intelligently generate data
payloads embedded in REST API requests in order to find data-processing bugs in cloud …

RESTful APIs are an increasingly common way to expose software systems functionality and
it is therefore of high interest to find methods to automatically test and verify such APIs. To …

Modern mobile apps use cloud-hosted HTTP-based API services and heavily rely on the
Internet infrastructure for data communication and storage. To improve performance and …

In industry, RESTful APIs are widely used to build modern Cloud Applications. Testing them
is challenging, because not only do they rely on network communications, but also they deal …

Cloud services are programmatically accessed through REST APIs. Since REST APIs are
constantly evolving, an important problem is how to prevent breaking changes of APIs, while …

Context Open standards are urgently needed for enabling software interoperability in Cloud
Computing. Open Cloud Computing Interface (OCCI) provides a set of best design principles …

Static application security testing (SAST) detects vulnerability warnings through static
program analysis. Fixing the vulnerability warnings tremendously improves software quality …

In recent years, REST API fuzzing has emerged to explore errors on a cloud service. Its
performance highly depends on the sequence construction and request generation …