Related Experiment Video
Updated: Jun 6, 2025

Integration of 5G Experimentation Infrastructures into a Multi-Site NFV Ecosystem
Published on: February 3, 2021
Tool report: EvoMaster-black and white box search-based fuzzing for REST, GraphQL and RPC APIs
Andrea Arcuri1,2, Man Zhang3, Susruthan Seran1
1School of Economics, Innovation, and Technology, Kristiania University College, Kirkegata 24-26, 0153 Oslo, Norway.
EvoMaster 3.0.0 enhances web API fuzzing with advanced heuristics and broader API support. This open-source tool improves security testing for REST, GraphQL, and RPC APIs, benefiting large enterprises.
Area of Science:
- Software Engineering
- Cybersecurity
- Automated Testing
Background:
- Web APIs are critical infrastructure, necessitating robust security testing.
- Fuzzing is an effective technique for discovering vulnerabilities in software.
- Existing fuzzing tools often lack comprehensive support for diverse API types.
Purpose of the Study:
- To introduce EvoMaster version 3.0.0, an advanced open-source fuzzing tool for Web APIs.
- To detail recent improvements in EvoMaster, including enhanced heuristics and broader API protocol support.
- To demonstrate the tool's practical application and widespread adoption in enterprise environments.
Main Methods:
- Implementing advanced white-box heuristics for targeted test case generation.
- Integrating sophisticated search algorithms to optimize the fuzzing process.
- Extending support to include GraphQL and RPC APIs alongside traditional REST APIs.
- Incorporating capabilities for interacting with databases and external services.
Main Results:
- EvoMaster 3.0.0 offers enhanced fuzzing capabilities for a wider range of Web APIs.
- The tool demonstrates successful integration with databases and external services.
- Successful application in large-scale enterprise environments, including Fortune 500 companies.
- Over 3000 downloads indicate significant interest and utility in the developer community.
Conclusions:
- EvoMaster 3.0.0 represents a significant advancement in automated Web API security testing.
- The tool's versatility and advanced features make it invaluable for modern API security.
- Continued development and adoption of EvoMaster will contribute to more secure web services.
More Related Videos
07:49Automated Deployment of an Internet Protocol Telephony Service on Unmanned Aerial Vehicles Using Network Functions Virtualization
Published on: November 26, 2019
07:34Probing the Limits of Egg Recognition Using Egg Rejection Experiments Along Phenotypic Gradients
Published on: August 22, 2018
Related Concept Videos
Leaky Scanning
Trial and Error and Algorithm
Quality Assurance
Elasticity
The elasticity of an object can be described by a stress-strain curve, which represents the relationship between stress...
Detection of Black Holes
Their closest cousins are neutron stars, which are composed almost entirely of neutrons packed against each other, making them extremely dense. A neutron star has the same mass as the Sun but its diameter is only a few kilometers. Therefore, the escape velocity from their surface is close to the speed of light.
Not until the 1960s, when the first neutron...
Slump Test
Concrete is poured into the mold in three layers to conduct the test. Each layer is compacted 25 times with a steel tamping rod, which has a five-eighths-inch diameter and a rounded end, to ensure even distribution and eliminate...