工具报告:EvoMaster-黑白盒子基于搜索的REST,GraphQL和RPC API的模糊化
Andrea Arcuri1,2, Man Zhang3, Susruthan Seran1
1School of Economics, Innovation, and Technology, Kristiania University College, Kirkegata 24-26, 0153 Oslo, Norway.
概括
EvoMaster 3.0.0 增强了 web API 的 fuzzing 功能,提供了先进的启发式分析和更广泛的 API 支持. 这种开源工具可以改善REST,GraphQL和RPC API的安全测试,使大型企业受益.
科学领域:
- 软件工程 软件工程 软件工程
- 网络安全 网络安全
- 自动化测试自动化测试
背景情况:
- 网络API是关键基础设施,需要强大的安全测试.
- 软件漏洞是发现软件漏洞的一种有效技术.
- 现有的模糊化工具往往缺乏对各种API类型的全面支持.
研究的目的:
- 为了介绍EvoMaster版本3.0.0,这是一个用于Web API的高级开源模糊工具.
- 详细介绍EvoMaster最近的改进,包括增强的启发式分析和更广泛的API协议支持.
- 展示该工具的实际应用和在企业环境中广泛采用.
主要方法:
- 实现针对性测试案例生成的高级白框启发式.
- 集成复杂的搜索算法来优化的过程.
- 将支持扩展到包括GraphQL和RPC API以及传统的REST API.
- 整合与数据库和外部服务交互的能力.
主要成果:
- EvoMaster 3.0.0为更广泛的Web API提供了增强的模糊功能.
- 该工具证明了与数据库和外部服务的成功集成.
- 在大型企业环境中成功应用,包括财富500强公司.
- 超过3000次的下载表明了开发者社区的重大兴趣和实用性.
结论:
- EvoMaster 3.0.0代表了自动化Web API安全测试的重大进步.
- 该工具的多功能性和高级功能使其对现代API安全性无价.
- 继续开发和采用EvoMaster将有助于更安全的网络服务.
更多相关视频
07:49Automated Deployment of an Internet Protocol Telephony Service on Unmanned Aerial Vehicles Using Network Functions Virtualization
Published on: November 26, 2019
8.0K
07:34Probing the Limits of Egg Recognition Using Egg Rejection Experiments Along Phenotypic Gradients
Published on: August 22, 2018
8.2K
相关概念视频
Leaky Scanning
5.1K
During most eukaryotic translation processes, the small 40S ribosome subunit scans an mRNA from its 5' end until it encounters the first start AUG codon. The large 60S ribosomal subunit then joins the smaller one to initiate protein synthesis. The location of the translation initiation is largely determined by the nucleotides near the start codon as there may be multiple translation initiation sites present on the mRNA. Marilyn Kozak discovered that the sequence RCCAUGG (where R...
5.1K
Trial and Error and Algorithm
92
A problem-solving strategy is a plan of action used to find a solution. Different strategies have distinct action plans. Trial and error involves trying different solutions until one works. For instance, to fix a broken printer, you might check ink levels, ensure the paper tray isn't jammed, and verify the printer's connection to your laptop. This method can be time-consuming but is commonly used. Thomas Edison, for example, used trial and error to find a suitable filament for the light...
92
Quality Assurance
115
Quality assurance is the overarching term used to describe the activities employed to ensure the proper performance of a system. These activities can be classified into three categories: quality control, quality assessment, and internal corrective measures. Typically, these activities work cyclically: quality control is performed before and during the analysis, while quality assessment occurs during and after the investigation. Internal corrective measures are implemented based on the findings...
115
Elasticity
3.4K
Elasticity is the ability of an object to withstand the effects of distortion and to return to its original size and shape once the forces causing deformation are removed. When an elastic material deforms under the action of an external force, it experiences internal resistance to the deformation. However, if no external force is applied, it returns to its original state.
The elasticity of an object can be described by a stress-strain curve, which represents the relationship between stress...
The elasticity of an object can be described by a stress-strain curve, which represents the relationship between stress...
3.4K
Detection of Black Holes
2.2K
Although black holes were theoretically postulated in the 1920s, they remained outside the domain of observational astronomy until the 1970s.
Their closest cousins are neutron stars, which are composed almost entirely of neutrons packed against each other, making them extremely dense. A neutron star has the same mass as the Sun but its diameter is only a few kilometers. Therefore, the escape velocity from their surface is close to the speed of light.
Not until the 1960s, when the first neutron...
Their closest cousins are neutron stars, which are composed almost entirely of neutrons packed against each other, making them extremely dense. A neutron star has the same mass as the Sun but its diameter is only a few kilometers. Therefore, the escape velocity from their surface is close to the speed of light.
Not until the 1960s, when the first neutron...
2.2K
Slump Test
143
The slump test is a widely used method to measure the workability of concrete. It employs a 12-inch high truncated cone mold that tapers from eight inches at the base to four inches at the top. Before testing, the mold is securely attached to a flat base and dampened.
Concrete is poured into the mold in three layers to conduct the test. Each layer is compacted 25 times with a steel tamping rod, which has a five-eighths-inch diameter and a rounded end, to ensure even distribution and eliminate...
Concrete is poured into the mold in three layers to conduct the test. Each layer is compacted 25 times with a steel tamping rod, which has a five-eighths-inch diameter and a rounded end, to ensure even distribution and eliminate...
143
