{"id":"https://openalex.org/W7167638164","doi":"https://doi.org/10.48550/arxiv.2607.04325","title":"Using OAI Overlay to Enhance REST API Fuzzing","display_name":"Using OAI Overlay to Enhance REST API Fuzzing","publication_year":2026,"publication_date":"2026-07-05","ids":{"openalex":"https://openalex.org/W7167638164","doi":"https://doi.org/10.48550/arxiv.2607.04325"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2607.04325","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.04325","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2607.04325","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5107955172","display_name":"\u00d6m\u00fcr \u015eahin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sahin, Omur","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5140201801","display_name":"Man Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Man","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062094487","display_name":"Alexander Poth","orcid":"https://orcid.org/0000-0002-2868-5633"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Poth, Alexander","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067040474","display_name":"Olsi Rrjolli","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Rrjolli, Olsi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5124038784","display_name":"Andreas Faes","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Faes, Andreas","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085224803","display_name":"Piyun Teng","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Teng, Piyun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103270731","display_name":"Kaiming Xue","orcid":"https://orcid.org/0000-0002-1271-5076"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xue, Kaiming","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103068049","display_name":"Wenjuan Ma","orcid":"https://orcid.org/0000-0001-8637-0800"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ma, Wenjuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5052735480","display_name":"Andrea Arcuri","orcid":"https://orcid.org/0000-0003-0799-2930"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Arcuri, Andrea","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9107999801635742,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9107999801635742,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.0551999993622303,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.006099999882280827,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9580000042915344},{"id":"https://openalex.org/keywords/overlay","display_name":"Overlay","score":0.7730000019073486},{"id":"https://openalex.org/keywords/rest","display_name":"Rest (music)","score":0.733299970626831},{"id":"https://openalex.org/keywords/vendor","display_name":"Vendor","score":0.47589999437332153},{"id":"https://openalex.org/keywords/representational-state-transfer","display_name":"Representational state transfer","score":0.38179999589920044},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.3799000084400177}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9580000042915344},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8725000023841858},{"id":"https://openalex.org/C136085584","wikidata":"https://www.wikidata.org/wiki/Q910289","display_name":"Overlay","level":2,"score":0.7730000019073486},{"id":"https://openalex.org/C77265313","wikidata":"https://www.wikidata.org/wiki/Q879844","display_name":"Rest (music)","level":2,"score":0.733299970626831},{"id":"https://openalex.org/C2777338717","wikidata":"https://www.wikidata.org/wiki/Q1762621","display_name":"Vendor","level":2,"score":0.47589999437332153},{"id":"https://openalex.org/C65399332","wikidata":"https://www.wikidata.org/wiki/Q749568","display_name":"Representational state transfer","level":3,"score":0.38179999589920044},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.3799000084400177},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.3797999918460846},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3418000042438507},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.33570000529289246},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.31029999256134033},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.2921000123023987},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.27630001306533813},{"id":"https://openalex.org/C99613125","wikidata":"https://www.wikidata.org/wiki/Q165194","display_name":"Application programming interface","level":2,"score":0.25459998846054077},{"id":"https://openalex.org/C170130773","wikidata":"https://www.wikidata.org/wiki/Q216378","display_name":"Usability","level":2,"score":0.25209999084472656},{"id":"https://openalex.org/C5655090","wikidata":"https://www.wikidata.org/wiki/Q192588","display_name":"Relational database","level":2,"score":0.25119999051094055}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2607.04325","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.04325","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2607.04325","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.04325","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.663399875164032}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"REST":[0,23,197],"APIs":[1,157,198],"are":[2,150],"widely":[3],"used":[4],"in":[5,31,39,48,68,123,153,199],"industry.":[6,200],"Therefore,":[7],"a":[8,35,85,102,178,188],"lot":[9],"of":[10,196],"research":[11],"has":[12],"been":[13],"focused":[14],"on":[15,44,113,155],"how":[16],"to":[17,58,63,75,104,110,144,191],"automatically":[18],"generate":[19],"test":[20],"cases":[21],"for":[22],"APIs,":[24],"with":[25],"few":[26],"different":[27,77],"open-source":[28],"fuzzers":[29,67],"existing":[30],"the":[32,45,49,66,69,114,140,163],"literature.":[33],"For":[34],"thorough":[36],"testing,":[37],"especially":[38],"black-box":[40,194],"scenarios,":[41],"just":[42],"relying":[43],"information":[46],"provided":[47,130],"OpenAPI":[50,95,115],"schemas":[51],"is":[52,129,187],"not":[53],"enough.":[54],"Testers":[55],"typically":[56],"need":[57],"provide":[59,120],"extra":[60],"input":[61,121],"data":[62,122,128],"help":[64],"steer":[65],"right":[70],"direction.":[71],"Dedicated":[72],"formats":[73],"specific":[74],"each":[76],"fuzzer":[78,142],"would":[79,83],"work,":[80],"but":[81],"they":[82],"create":[84],"vendor":[86],"lock-in,":[87],"as":[88,90,131,175,177],"well":[89,176],"increasing":[91],"cognitive":[92],"load.":[93],"The":[94],"Initiative":[96],"(OAI)":[97],"standard":[98,108],"Overlay":[99,124,146,186],"might":[100],"be":[101],"solution":[103,190],"this":[105,135],"problem.":[106],"Such":[107],"enables":[109],"define":[111],"transformations":[112],"schemas,":[116],"where":[117,126],"testers":[118],"can":[119],"files":[125,147],"such":[127],"``examples''":[132],"entries.":[133],"In":[134],"paper,":[136],"we":[137],"have":[138],"extended":[139],"state-of-the-art":[141],"EvoMaster":[143],"support":[145],"natively.":[148],"Experiments":[149],"carried":[151],"out":[152],"industry":[154],"five":[156,159],"from":[158,161],"enterprises":[160,174],"around":[162],"world":[164],"(e.g.,":[165],"Belgium,":[166],"China,":[167],"Germany":[168],"and":[169],"T\u00fcrkiye),":[170],"including":[171],"two":[172],"Fortune500":[173],"3-man":[179],"startup.":[180],"Our":[181],"industrial":[182],"results":[183],"show":[184],"that":[185],"viable":[189],"better":[192],"enable":[193],"fuzzing":[195]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-07-08T00:00:00"}