Fuzzy testing method and device for cloud service API (Application Program Interface)

A fuzz testing and cloud service technology, applied in software testing/debugging, computing models, machine learning, etc., can solve problems such as low quality of test packets, and achieve the effect of improving the pass rate and quality

Pending Publication Date: 2022-07-05
ALIPAY (HANGZHOU) INFORMATION TECH CO LTD
View PDF0 Cites 2 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] The disclosure provides a cloud service API fuzz testing method and device to solve the problem of low quality test messages

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Fuzzy testing method and device for cloud service API (Application Program Interface)
  • Fuzzy testing method and device for cloud service API (Application Program Interface)
  • Fuzzy testing method and device for cloud service API (Application Program Interface)

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0029] The technical solutions in the embodiments of the present disclosure will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present disclosure. Obviously, the described embodiments are only a part of the embodiments of the present disclosure, but not all of the embodiments.

[0030] In the past ten years, cloud services have developed rapidly. Cloud services are usually deployed on cloud computing platforms provided by cloud providers, such as Amazon web services, Microsoft Azure, and Alibaba Cloud Services. Cloud services provide users with software as a service (SaaS), platform as a service (PaaS) and other services through the Internet, so that users do not need to install relevant software locally while enjoying these services.

[0031] Cloud service APIs are interfaces provided by cloud service providers to interact with external programs. There are many types of cloud service API interfaces. Currently...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses a fuzzy testing method and device for a cloud service API (Application Program Interface). The method comprises the following steps: carrying out fuzzy testing on a cloud service API (Application Program Interface) by utilizing a first test message sequence, wherein the first test message sequence comprises a target test message which successfully passes through the detection of the cloud service API; training a first machine learning model by using the target test message, wherein the first machine learning model is used for learning a mapping relationship between parameters and parameter values in the target test message; assigning a value to a test message by using the trained first machine learning model to generate a second test message sequence; and performing a fuzzy test on the cloud service API by using the second test message sequence.

Description

technical field [0001] The present disclosure relates to the field of cloud service security testing, and more particularly, to a method and apparatus for fuzzing cloud service APIs. Background technique [0002] The security of cloud service application programming interface (API) is very important. In order to mine the potential vulnerabilities of cloud service APIs and avoid risks, a testing tool RESTler is proposed in related technologies. RESTler is widely used to automate fuzzing of cloud service APIs. [0003] In the process of fuzzing with RESTler, RESTler randomly assigns values ​​to parameters in the message module to generate test messages. However, the quality of test packets generated by RESTler is low, and a large number of test packets are rejected by cloud services. SUMMARY OF THE INVENTION [0004] The present disclosure provides a cloud service API fuzz testing method and device to solve the problem of low quality of test packets. [0005] A first asp...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): G06F11/36G06N20/00
CPCG06F11/3672G06N20/00
Inventor纪守领吕晨阳许嘉诚刘向阳曹伟
OwnerALIPAY (HANGZHOU) INFORMATION TECH CO LTD