• Home
  • Search
  • DynER: Optimized Test Case Generation for Representational State Transfer (REST)ful Application Programming Interface (API) Fuzzers Guided by Dynamic Error Responses
  • Cite Icon3
  • https://doi.org/10.3390/electronics13173476Copy DOI Icon

DynER: Optimized Test Case Generation for Representational State Transfer (REST)ful Application Programming Interface (API) Fuzzers Guided by Dynamic Error Responses

Show More
  • Abstract
  • Literature Map
  • References
  • Citations
  • Similar Papers
Abstract

Modern web services widely provide RESTful APIs for clients to access their functionality programmatically. Fuzzing is an emerging technique for ensuring the reliability of RESTful APIs. However, the existing RESTful API fuzzers repeatedly generate invalid requests due to unawareness of errors in the invalid tested requests and lack of effective strategy to generate legal value for the incorrect parameters. Such limitations severely hinder the fuzzing performance. In this paper, we propose DynER, a new test case generation method guided by dynamic error responses during fuzzing. DynER designs two strategies of parameter value generation for purposefully revising the incorrect parameters of invalid tested requests to generate new test requests. The strategies are, respectively, based on prompting Large Language Model (LLM) to understand the semantics information in error responses and actively accessing API-related resources. We apply DynER to the state-of-the-art fuzzer RESTler and implement DynER-RESTler. DynER-RESTler outperforms foREST on two real-world RESTful services, WordPress and GitLab with a 41.21% and 26.33% higher average pass rate for test requests and a 12.50% and 22.80% higher average number of unique request types successfully tested, respectively. The experimental results demonstrate that DynER significantly improves the effectiveness of test cases and fuzzing performance. Additionally, DynER-RESTler finds three new bugs.

Similar Papers
  • Conference Article
  • Citations2

Application of HATEOAS Principle in RESTful API Design

  • Nov 21, 2022
  • Fikri Aydemir +1
  • Research Article
  • Citations2

Pengembangan Sistem Seleksi Proposal Penelitian Berbasis Web Service Menggunakan REST API

  • Sep 13, 2024
  • JTIM : Jurnal Teknologi Informasi dan Multimedia
  • Daru Prasetyawan +1
  • Research Article
  • Citations4188

Python Materials Genomics (pymatgen): A robust, open-source python library for materials analysis

  • Dec 08, 2012
  • Computational Materials Science
  • Shyue Ping Ong +9
  • Research Article
  • Citations112

Metamorphic Testing of RESTful Web APIs

  • Nov 01, 2018
  • IEEE Transactions on Software Engineering
  • Sergio Segura +3
  • Conference Article
  • Citations10

Proposal of GRPC as a New Northbound API for Application Layer Communication Efficiency in SDN

  • Jan 05, 2018
  • Sang Gyun Du +2
  • PDF
  • Research Article
  • Citations14

PERANCANGAN APPLICATION PROGRAMMING INTERFACE (API) BERBASIS WEB MENGGUNAKAN GAYA ARSITEKTUR REPRESENTATIONAL STATE TRANSFER (REST) UNTUK PENGEMBANGAN SISTEM INFORMASI ADMINISTRASI PASIEN KLINIK PERAWATAN KULIT

  • Apr 25, 2018
  • Jurnal Komputasi
  • Beni Adi Pranata +2
  • Conference Article
  • Citations13

Design and Implementation of a RESTful IMS API

  • Sep 01, 2010
  • Heidi-Maria Rissanen +2
  • Research Article
  • Citations2

NeoVault: empowering neonatal research through a neonate data hub

  • Nov 30, 2024
  • BMC Pediatrics
  • Janet Pigueiras-Del-Real +6
  • Research Article
  • Citations3

Rest vs. GraphQL: Comparative Analysis of API Design Approaches

  • Jan 01, 2023
  • International Journal of Multidisciplinary Research and Growth Evaluation.
  • Surbhi Kanthed
  • Research Article
  • Citations1

Evaluating the Test Adequacy of Benchmarks for LLMs on Code Generation

  • Jun 25, 2025
  • Journal of Software: Evolution and Process
  • Xiangyue Liu +5
  • Book Chapter

Building Node.js REST API Servers with Express.js and Hapi

  • Jan 01, 2014
  • Azat Mardan
  • Research Article
  • Citations6

Evergreen in context

  • Jan 22, 2009
  • Bulletin of the American Society for Information Science and Technology
  • Robert E Molyneux
  • Conference Article
  • Citations18

Automated Control Logic Test Case Generation using Large Language Models

  • Sep 10, 2024
  • Heiko Koziolek +3
  • Research Article
  • Citations24

Evaluating large language models for software testing

  • Nov 13, 2024
  • Computer Standards & Interfaces
  • Yihao Li +4
  • PDF
  • Research Article
  • Citations4

A Citation Data Collector Tool of Author’s Profiles in Scopus Based on Web and Application Programming Interface (API)

  • Feb 01, 2021
  • IOP Conference Series: Materials Science and Engineering
  • Adian Fatchur Rochim +2
Cactus Communications logo

Copyright 2026 Cactus Communications. All rights reserved.