{"id":"https://openalex.org/W4403536746","doi":"https://doi.org/10.1145/3691620.3695265","title":"Seeding and Mocking in White-Box Fuzzing Enterprise RPC APIs: An Industrial Case Study","display_name":"Seeding and Mocking in White-Box Fuzzing Enterprise RPC APIs: An Industrial Case Study","publication_year":2024,"publication_date":"2024-10-18","ids":{"openalex":"https://openalex.org/W4403536746","doi":"https://doi.org/10.1145/3691620.3695265"},"language":"en","primary_location":{"id":"doi:10.1145/3691620.3695265","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3691620.3695265","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 39th IEEE/ACM International Conference on Automated Software Engineering","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3691620.3695265","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100353083","display_name":"Man Zhang","orcid":"https://orcid.org/0000-0003-1204-9322"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Man Zhang","raw_affiliation_strings":["State Key Laboratory of Complex & Critical Software Environment (CCSE), Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-1204-9322","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Complex & Critical Software Environment (CCSE), Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052735480","display_name":"Andrea Arcuri","orcid":"https://orcid.org/0000-0003-0799-2930"},"institutions":[{"id":"https://openalex.org/I184531372","display_name":"OsloMet \u2013 Oslo Metropolitan University","ror":"https://ror.org/04q12yn84","country_code":"NO","type":"education","lineage":["https://openalex.org/I184531372"]},{"id":"https://openalex.org/I2800207870","display_name":"H\u00f8yskolen Kristiania","ror":"https://ror.org/03gss5916","country_code":"NO","type":"education","lineage":["https://openalex.org/I2800207870"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Andrea Arcuri","raw_affiliation_strings":["Kristiania University College, Oslo, Norway","Oslo Metropolitan University, Oslo, Norway"],"raw_orcid":"https://orcid.org/0000-0003-0799-2930","affiliations":[{"raw_affiliation_string":"Kristiania University College, Oslo, Norway","institution_ids":["https://openalex.org/I2800207870"]},{"raw_affiliation_string":"Oslo Metropolitan University, Oslo, Norway","institution_ids":["https://openalex.org/I184531372"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5107868838","display_name":"P. K. Teng","orcid":"https://orcid.org/0009-0009-0349-4265"},"institutions":[{"id":"https://openalex.org/I4210087373","display_name":"Meizu (China)","ror":"https://ror.org/0067g4302","country_code":"CN","type":"company","lineage":["https://openalex.org/I4210087373"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Piyun Teng","raw_affiliation_strings":["Meituan, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0009-0349-4265","affiliations":[{"raw_affiliation_string":"Meituan, Beijing, China","institution_ids":["https://openalex.org/I4210087373"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103270731","display_name":"Kaiming Xue","orcid":"https://orcid.org/0000-0002-1271-5076"},"institutions":[{"id":"https://openalex.org/I4210087373","display_name":"Meizu (China)","ror":"https://ror.org/0067g4302","country_code":"CN","type":"company","lineage":["https://openalex.org/I4210087373"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kaiming Xue","raw_affiliation_strings":["Meituan, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-1271-5076","affiliations":[{"raw_affiliation_string":"Meituan, Beijing, China","institution_ids":["https://openalex.org/I4210087373"]}]},{"author_position":"last","author":{"id":null,"display_name":"Wenhao Wang","orcid":"https://orcid.org/0009-0007-9527-8070"},"institutions":[{"id":"https://openalex.org/I4210087373","display_name":"Meizu (China)","ror":"https://ror.org/0067g4302","country_code":"CN","type":"company","lineage":["https://openalex.org/I4210087373"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenhao Wang","raw_affiliation_strings":["Meituan, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0007-9527-8070","affiliations":[{"raw_affiliation_string":"Meituan, Beijing, China","institution_ids":["https://openalex.org/I4210087373"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"2024","last_page":"2034"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9955000281333923,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9509767293930054},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5259832739830017},{"id":"https://openalex.org/keywords/white-box","display_name":"White box","score":0.45826417207717896},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.31537675857543945},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.2032032310962677},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.0937005877494812}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9509767293930054},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5259832739830017},{"id":"https://openalex.org/C180932941","wikidata":"https://www.wikidata.org/wiki/Q997233","display_name":"White box","level":2,"score":0.45826417207717896},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.31537675857543945},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.2032032310962677},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.0937005877494812}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3691620.3695265","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3691620.3695265","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 39th IEEE/ACM International Conference on Automated Software Engineering","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3691620.3695265","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3691620.3695265","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 39th IEEE/ACM International Conference on Automated Software Engineering","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.4300000071525574,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"awards":[{"id":"https://openalex.org/G6380517726","display_name":null,"funder_award_id":"864972","funder_id":"https://openalex.org/F4320334678","funder_display_name":"European Research Council"}],"funders":[{"id":"https://openalex.org/F4320334678","display_name":"European Research Council","ror":"https://ror.org/0472cxd90"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":31,"referenced_works":["https://openalex.org/W1526710119","https://openalex.org/W1535807333","https://openalex.org/W1993760289","https://openalex.org/W2295840463","https://openalex.org/W2586946380","https://openalex.org/W2799310732","https://openalex.org/W2804003629","https://openalex.org/W2903799441","https://openalex.org/W2966971704","https://openalex.org/W2997401484","https://openalex.org/W3038801694","https://openalex.org/W3047047526","https://openalex.org/W3099837301","https://openalex.org/W3119672550","https://openalex.org/W3126551690","https://openalex.org/W3170391117","https://openalex.org/W3170548061","https://openalex.org/W3191614725","https://openalex.org/W3202888839","https://openalex.org/W3204593724","https://openalex.org/W4224306538","https://openalex.org/W4231859022","https://openalex.org/W4282829523","https://openalex.org/W4285814675","https://openalex.org/W4299959846","https://openalex.org/W4300811928","https://openalex.org/W4312767818","https://openalex.org/W4376504003","https://openalex.org/W4378651134","https://openalex.org/W4384154515","https://openalex.org/W4386027284"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2511770387","https://openalex.org/W3120811337","https://openalex.org/W2766647240","https://openalex.org/W4385301282","https://openalex.org/W2990186179","https://openalex.org/W4392652182","https://openalex.org/W2475851004"],"abstract_inverted_index":{"Microservices":[0],"is":[1,39,187],"now":[2],"becoming":[3],"a":[4,29],"promising":[5],"architecture":[6],"to":[7,15,27,31,87,90,106,160,192],"build":[8],"large-scale":[9],"web":[10],"services":[11,117],"in":[12,65,70,99,217,230,238],"industry.":[13],"Due":[14],"the":[16,45,61,93,104,125,184,239],"high":[17],"complexity":[18],"of":[19,35,53,72,109,115,124,132,147,163,174,189,205],"enterprise":[20,140,232],"microservices,":[21],"industry":[22],"has":[23,57],"an":[24,40,84],"urgent":[25],"need":[26],"have":[28],"solution":[30],"enable":[32],"automated":[33,50],"testing":[34,52,166],"such":[36],"systems.":[37],"EvoMaster":[38,177,182],"open-source":[41],"fuzzer,":[42],"equipped":[43],"with":[44,118,183],"state-of-the-art":[46,94],"techniques":[47],"for":[48,149],"supporting":[49],"system-level":[51,165],"Web":[54],"APIs.":[55,220],"It":[56],"been":[58],"assessed":[59],"as":[60,122],"most":[62],"performant":[63],"tool":[64,105],"two":[66,130,135],"recent":[67],"empirical":[68,85],"studies":[69],"terms":[71],"line":[73,194,200],"coverage":[74,201],"and":[75,113,167,172,210,226],"fault":[76],"detection.":[77],"In":[78,221],"this":[79],"paper,":[80],"we":[81,223],"carried":[82],"out":[83,204],"experiment":[86],"investigate":[88],"how":[89],"better":[91],"apply":[92],"academic":[95],"prototype":[96],"(i.e.,":[97],"EvoMaster)":[98],"industrial":[100,111],"context.":[101],"We":[102,128],"extended":[103],"handle":[107],"seeding":[108],"existing":[110,161],"tests,":[112],"mocking":[114],"external":[116],"their":[119,150],"data":[120],"handled":[121],"part":[123],"input":[126],"fuzzing.":[127],"studied":[129],"configurations":[131],"EvoMaster,":[133],"using":[134],"time":[136],"budgets,":[137],"on":[138,202,212],"40":[139,206,219],"RPC-based":[141],"APIs":[142],"(involving":[143],"5.6":[144],"million":[145],"lines":[146],"code":[148],"core":[151],"business":[152],"logic)":[153],"at":[154],"Meituan.":[155],"Results":[156],"show":[157],"that,":[158],"compared":[159],"practice":[162],"manual":[164],"tests":[168],"produced":[169],"by":[170],"record":[171],"replay":[173],"online":[175],"traffic,":[176],"demonstrates":[178],"clear":[179],"additional":[180],"benefits.":[181],"best":[185],"configuration":[186],"capable":[188],"covering":[190,196],"up":[191],"32.4%":[193],"coverage,":[195],"more":[197],"than":[198],"10%":[199],"36":[203],"(90%)":[207],"case":[208],"studies,":[209],"identifying":[211],"average":[213],"3520":[214],"potential":[215],"faults":[216],"these":[218],"addition,":[222],"also":[224],"identified":[225],"discussed":[227],"important":[228],"challenges":[229],"fuzzing":[231],"microservices":[233],"that":[234],"must":[235],"be":[236],"addressed":[237],"future.":[240]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}