Open Problems in Fuzzing RESTful APIs: A Comparison of Tools

RESTful APIs are a type of web service that widely used in industry. In the last few years, lot effort research community has been spent designing novel techniques to automatically fuzz those find faults them. Many real were found large variety APIs. However, usually analyzed fuzzers treat as black-box, and no analysis what is actually covered these systems done. Therefore, although clearly useful for practitioners, we do not know their current limitations actual effectiveness. Solving this necessary step be able design better, more efficient effective techniques. To address issue, paper compare seven state-of-the-art on 18 open-source, one industrial artificial We then source code which parts fail generate tests for. This points clear fuzzers, listing concrete challenges follow up on.