Deriving semantics-aware fuzzers from web API schemas
Zac Hatfield-Dodds, Dmitry Dygalo
Abstract
We present Schemathesis, a tool for finding semantic errors and crashes in OpenAPI or GraphQL web APIs through property-based testing. Our evaluation, thirty independent runs of eight tools against sixteen containerized open-source web services, shows that Schemathesis wildly outperforms all previous tools.
Topics & Concepts
Computer scienceSemantics (computer science)World Wide WebSemantic WebWeb serviceInformation retrievalSemantic Web StackSocial Semantic WebWeb browserProgramming languageWeb APIWeb modelingThe InternetSoftware Testing and Debugging TechniquesSoftware Engineering ResearchAdvanced Malware Detection Techniques