English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Remote Procedure Call (RPC) is a communication protocol to supportclient-server interactions among services over a network. RPC is widely appliedin industry for building large-scale distributed systems, such asMicroservices. Modern RPC frameworks include for example Thrift, gRPC, SOFARPCand Dubbo. Testing such systems is very challenging, due to the complexity ofdistributed systems and various RPC frameworks the system could employ. To thebest of our knowledge, there does not exist any tool or solution that couldenable automated testing of modern RPC-based services. To fill this gap, inthis paper we propose the first approach in the literature, together with anopen-source tool, for white-box fuzzing modern RPC-based APIs with search. Toassess our novel approach, we conducted an empirical study with two artificialand four industrial APIs selected by our industrial partner. The tool has beenintegrated into a real industrial pipeline, and could be applied to realindustrial development process for fuzzing RPC-based APIs. To furtherdemonstrate its effectiveness and application in industrial settings, we alsoreport results of employing our tool for fuzzing another 50 industrial APIsautonomously conducted by our industrial partner in their testing processes.Results show that our novel approach is capable of enabling automated test casegeneration for industrial RPC-based APIs (i.e., two artificial and 54industrial). We also compared with a simple grey-box technique and existingmanually written tests. Our white-box solution achieves significantimprovements on code coverage. Regarding fault detection, by conducting acareful review with our industrial partner of the tests generated by our novelapproach in the selected four industrial APIs, a total of 41 real faults wereidentified, which have now been fixed. Another 8,377 detected faults arecurrently under investigation.

White-box Fuzzing RPC-based APIs with EvoMaster: An Industrial Case Study