{"id":"https://openalex.org/W4407152789","doi":"https://doi.org/10.1007/s10207-024-00979-w","title":"Fuzzing frameworks for server-side web applications: a survey","display_name":"Fuzzing frameworks for server-side web applications: a survey","publication_year":2025,"publication_date":"2025-02-05","ids":{"openalex":"https://openalex.org/W4407152789","doi":"https://doi.org/10.1007/s10207-024-00979-w"},"language":"en","primary_location":{"id":"doi:10.1007/s10207-024-00979-w","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-024-00979-w","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-024-00979-w.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s10207-024-00979-w.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5099054961","display_name":"I Putu Arya Dharmaadi","orcid":null},"institutions":[{"id":"https://openalex.org/I126826664","display_name":"Udayana University","ror":"https://ror.org/035qsg823","country_code":"ID","type":"education","lineage":["https://openalex.org/I126826664"]},{"id":"https://openalex.org/I169381384","display_name":"University of Groningen","ror":"https://ror.org/012p63287","country_code":"NL","type":"education","lineage":["https://openalex.org/I169381384"]}],"countries":["ID","NL"],"is_corresponding":true,"raw_author_name":"I Putu Arya Dharmaadi","raw_affiliation_strings":["Udayana University, Bali, Indonesia","University of Groningen, Groningen, The Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Udayana University, Bali, Indonesia","institution_ids":["https://openalex.org/I126826664"]},{"raw_affiliation_string":"University of Groningen, Groningen, The Netherlands","institution_ids":["https://openalex.org/I169381384"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102849919","display_name":"\u0397\u03bb\u03af\u03b1\u03c2 \u0391\u03b8\u03b1\u03bd\u03b1\u03c3\u03cc\u03c0\u03bf\u03c5\u03bb\u03bf\u03c2","orcid":"https://orcid.org/0000-0002-8759-3261"},"institutions":[{"id":"https://openalex.org/I34771391","display_name":"University of Cyprus","ror":"https://ror.org/02qjrjx09","country_code":"CY","type":"education","lineage":["https://openalex.org/I34771391"]}],"countries":["CY"],"is_corresponding":false,"raw_author_name":"Elias Athanasopoulos","raw_affiliation_strings":["University of Cyprus, Nicosia, Cyprus"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Cyprus, Nicosia, Cyprus","institution_ids":["https://openalex.org/I34771391"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5003244908","display_name":"Fatih T\u00fcrkmen","orcid":"https://orcid.org/0000-0002-6262-4869"},"institutions":[{"id":"https://openalex.org/I169381384","display_name":"University of Groningen","ror":"https://ror.org/012p63287","country_code":"NL","type":"education","lineage":["https://openalex.org/I169381384"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Fatih Turkmen","raw_affiliation_strings":["University of Groningen, Groningen, The Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Groningen, Groningen, The Netherlands","institution_ids":["https://openalex.org/I169381384"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5099054961"],"corresponding_institution_ids":["https://openalex.org/I126826664","https://openalex.org/I169381384"],"apc_list":{"value":2590,"currency":"EUR","value_usd":3190},"apc_paid":{"value":2590,"currency":"EUR","value_usd":3190},"fwci":11.0934,"has_fulltext":true,"cited_by_count":8,"citation_normalized_percentile":{"value":0.98287367,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":100},"biblio":{"volume":"24","issue":"2","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12799","display_name":"Mobile and Web Applications","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7576420307159424},{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.7358943223953247},{"id":"https://openalex.org/keywords/server-side","display_name":"Server-side","score":0.6993791460990906},{"id":"https://openalex.org/keywords/client-side","display_name":"Client-side","score":0.6492622494697571},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.571255624294281},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.5294803380966187},{"id":"https://openalex.org/keywords/side-channel-attack","display_name":"Side channel attack","score":0.5094500184059143},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.43359988927841187},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.3224228620529175},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1952565312385559},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.12970656156539917}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7576420307159424},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.7358943223953247},{"id":"https://openalex.org/C14414571","wikidata":"https://www.wikidata.org/wiki/Q519081","display_name":"Server-side","level":2,"score":0.6993791460990906},{"id":"https://openalex.org/C202477664","wikidata":"https://www.wikidata.org/wiki/Q1352449","display_name":"Client-side","level":2,"score":0.6492622494697571},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.571255624294281},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.5294803380966187},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.5094500184059143},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.43359988927841187},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.3224228620529175},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1952565312385559},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.12970656156539917}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1007/s10207-024-00979-w","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-024-00979-w","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-024-00979-w.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},{"id":"pmh:oai:pure.rug.nl:openaire_cris_publications/17b20b38-f91d-40cd-ae44-336b1411ad25","is_oa":true,"landing_page_url":"https://research.rug.nl/en/publications/17b20b38-f91d-40cd-ae44-336b1411ad25","pdf_url":null,"source":{"id":"https://openalex.org/S4306400420","display_name":"University of Groningen research database (University of Groningen / Centre for Information Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I169381384","host_organization_name":"University of Groningen","host_organization_lineage":["https://openalex.org/I169381384"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"Dharmaadi, I P A, Athanasopoulos, E & Turkmen, F 2025, 'Fuzzing frameworks for server-side web applications : a survey', International Journal of Information Security, vol. 24, no. 2, 73. https://doi.org/10.1007/s10207-024-00979-w","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:pure.rug.nl:publications/17b20b38-f91d-40cd-ae44-336b1411ad25","is_oa":true,"landing_page_url":"https://hdl.handle.net/11370/17b20b38-f91d-40cd-ae44-336b1411ad25","pdf_url":null,"source":{"id":"https://openalex.org/S4306400420","display_name":"University of Groningen research database (University of Groningen / Centre for Information Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I169381384","host_organization_name":"University of Groningen","host_organization_lineage":["https://openalex.org/I169381384"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Dharmaadi, I P A, Athanasopoulos, E & Turkmen, F 2025, 'Fuzzing frameworks for server-side web applications : a survey', International Journal of Information Security, vol. 24, no. 2, 73. https://doi.org/10.1007/s10207-024-00979-w","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.1007/s10207-024-00979-w","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-024-00979-w","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-024-00979-w.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320328515","display_name":"Lembaga Pengelola Dana Pendidikan","ror":null}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4407152789.pdf","grobid_xml":"https://content.openalex.org/works/W4407152789.grobid-xml"},"referenced_works_count":89,"referenced_works":["https://openalex.org/W80941183","https://openalex.org/W1902237438","https://openalex.org/W1963918138","https://openalex.org/W1983801562","https://openalex.org/W2002934700","https://openalex.org/W2016613525","https://openalex.org/W2101629181","https://openalex.org/W2125357166","https://openalex.org/W2126514268","https://openalex.org/W2149801502","https://openalex.org/W2153225416","https://openalex.org/W2157331557","https://openalex.org/W2512714308","https://openalex.org/W2515236103","https://openalex.org/W2625141509","https://openalex.org/W2743442682","https://openalex.org/W2774945684","https://openalex.org/W2790334838","https://openalex.org/W2798388185","https://openalex.org/W2804003629","https://openalex.org/W2806377938","https://openalex.org/W2806746626","https://openalex.org/W2938295127","https://openalex.org/W2955426500","https://openalex.org/W2955498974","https://openalex.org/W2955835447","https://openalex.org/W2963350015","https://openalex.org/W2968373634","https://openalex.org/W2979357014","https://openalex.org/W2982121747","https://openalex.org/W2997401484","https://openalex.org/W3001307185","https://openalex.org/W3039344911","https://openalex.org/W3047848029","https://openalex.org/W3047947484","https://openalex.org/W3082737479","https://openalex.org/W3094662328","https://openalex.org/W3099713549","https://openalex.org/W3101861373","https://openalex.org/W3106293840","https://openalex.org/W3111226293","https://openalex.org/W3119757615","https://openalex.org/W3126551690","https://openalex.org/W3163844163","https://openalex.org/W3173859375","https://openalex.org/W3177546869","https://openalex.org/W3194220238","https://openalex.org/W3195816859","https://openalex.org/W3202888839","https://openalex.org/W3203052926","https://openalex.org/W3204593724","https://openalex.org/W3211595358","https://openalex.org/W4207068811","https://openalex.org/W4210660460","https://openalex.org/W4213076998","https://openalex.org/W4213108923","https://openalex.org/W4213274161","https://openalex.org/W4214665471","https://openalex.org/W4220791610","https://openalex.org/W4226169996","https://openalex.org/W4235842902","https://openalex.org/W4251788567","https://openalex.org/W4284706564","https://openalex.org/W4285300585","https://openalex.org/W4288084466","https://openalex.org/W4293200208","https://openalex.org/W4293235803","https://openalex.org/W4293569719","https://openalex.org/W4308641864","https://openalex.org/W4312301548","https://openalex.org/W4312828963","https://openalex.org/W4321482783","https://openalex.org/W4328028894","https://openalex.org/W4366825970","https://openalex.org/W4376504003","https://openalex.org/W4378364617","https://openalex.org/W4384154515","https://openalex.org/W4384302810","https://openalex.org/W4384345660","https://openalex.org/W4385071300","https://openalex.org/W4385301282","https://openalex.org/W4386027284","https://openalex.org/W4386365560","https://openalex.org/W4387369092","https://openalex.org/W4388212420","https://openalex.org/W4389296313","https://openalex.org/W4391558767","https://openalex.org/W4391724785","https://openalex.org/W6780472836"],"related_works":["https://openalex.org/W3005688497","https://openalex.org/W4302890120","https://openalex.org/W4322735059","https://openalex.org/W4301042531","https://openalex.org/W4403348793","https://openalex.org/W4319448716","https://openalex.org/W4402156186","https://openalex.org/W2993438822","https://openalex.org/W3003811204","https://openalex.org/W1979999931"],"abstract_inverted_index":{"Abstract":[0],"There":[1],"are":[2,32,51,66,219],"around":[3],"5.3":[4],"billion":[5],"Internet":[6],"users,":[7],"amounting":[8],"to":[9,47,70,101,146,182,198,233],"65.7%":[10],"of":[11,21,76,137,189,210],"the":[12,19,22,26,40,55,61,67,71,77,89,111,141,173,208],"global":[13],"population,":[14],"and":[15,125,178,207],"web":[16,30,37,42,93,117,120,205,226,243],"technology":[17],"is":[18,74,105],"backbone":[20],"services":[23],"delivered":[24],"via":[25],"Internet.":[27],"To":[28],"ensure":[29],"applications":[31,43,62,118],"free":[33],"from":[34,133,172],"security-related":[35,185],"bugs,":[36],"developers":[38],"test":[39],"server-side":[41],"before":[44],"deploying":[45],"them":[46],"production.":[48],"The":[49,187],"tests":[50],"commonly":[52],"conducted":[53],"through":[54,119],"interfaces":[56],"(i.e.,":[57],"Web":[58,174],"API)":[59],"that":[60,193],"expose":[63],"since":[64],"they":[65],"entry":[68],"points":[69],"application.":[72],"Fuzzing":[73],"one":[75],"most":[78],"promising":[79],"automated":[80],"software":[81],"testing":[82,116],"techniques":[83],"suitable":[84],"for":[85,115,165,225,239],"this":[86,190,230],"task;":[87],"however,":[88],"research":[90,217,241],"on":[91,155],"(server-side)":[92],"application":[94],"fuzzing":[95,103,113,224],"has":[96],"been":[97],"rather":[98],"limited":[99],"compared":[100],"binary":[102],"which":[104],"researched":[106],"extensively.":[107],"This":[108],"study":[109],"reviews":[110],"state-of-the-art":[112],"frameworks":[114],"API,":[121],"identifies":[122],"open":[123],"challenges,":[124],"gives":[126],"potential":[127,216],"future":[128],"research.":[129],"We":[130],"collect":[131],"papers":[132],"seven":[134],"online":[135],"repositories":[136],"peer-reviewed":[138],"articles":[139],"over":[140],"last":[142],"ten":[143],"years.":[144],"Compared":[145],"other":[147],"similar":[148],"studies,":[149],"our":[150],"review":[151],"focuses":[152],"more":[153,184],"deeply":[154],"revealing":[156],"prior":[157],"work":[158],"strategies":[159],"in":[160,242],"generating":[161],"valid":[162],"HTTP":[163],"requests":[164],"attack":[166],"surface":[167],"exploration,":[168],"utilising":[169],"security":[170],"feedback":[171],"Under":[175],"Tests":[176],"(WUTs),":[177],"expanding":[179],"input":[180],"spaces":[181],"uncover":[183],"bugs.":[186],"findings":[188],"survey":[191],"indicate":[192],"several":[194],"crucial":[195],"challenges":[196],"need":[197],"be":[199],"solved,":[200],"such":[201,222],"as":[202,223],"less":[203],"effective":[204],"instrumentation":[206],"complexity":[209],"handling":[211],"microservice":[212],"applications.":[213],"Furthermore,":[214],"some":[215],"directions":[218],"also":[220],"provided,":[221],"client":[227],"programming.":[228],"Ultimately,":[229],"paper":[231],"aims":[232],"give":[234],"a":[235],"good":[236],"starting":[237],"point":[238],"further":[240],"API":[244],"fuzzer.":[245]},"counts_by_year":[{"year":2026,"cited_by_count":7},{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-02T09:51:11.867554","created_date":"2025-10-10T00:00:00"}