检索结果-内蒙古大学图书馆

电脑迷 2019年第1期 107页

作者：刘文元江苏省徐州技师学院信息工程学院

提到web api,大部分开发者会想到REST。发送请求到一个特定请求的URL,然后会收到结果,就像是HTML, XML,JSON,等应用可以理解的任何格式。Facebook的api系统中,提供了一种新的定义api的方式——GraphQL。开发人员使用强类型查询语言来定... 详细信息

提到web api,大部分开发者会想到REST。发送请求到一个特定请求的URL,然后会收到结果,就像是HTML, XML,JSON,等应用可以理解的任何格式。Facebook的api系统中,提供了一种新的定义api的方式——GraphQL。开发人员使用强类型查询语言来定义请求和响应,这可以让一个应用精确地指定它需要从api中获取哪些数据。因此GraphQL的目的是提供一个更高效,更结构化,更系统的方式来替代REST。本文我们会展示GraphQL与REST的不同之处,这些不同是如何影响api设计的,以及在从服务器获取数据方面GraphQL为什么是比REST更好的选择。

关键词： web api REST GraphQL

来源：评论

学校读者我要写书评

暂无评论

Using Model Transformation to Generate Chatbots for web apis

引用

JOURNAL OF INFORMATION SCIENCE AND ENGINEERING 2025年第1期41卷 137-153页

作者： Ma, Shang-pin You, Wan-lin Wang, Sheng-kai Natl Taiwan Ocean Univ Dept Comp Sci & Engn Keelung 202 Taiwan

Chatbots provide a novel form of user interface, and web api (Application Programming Interface) technology is rapidly expanding to encompass a wide range of applications. The integration of Chatbots with apis facilitates access to a wide range of data and functionalities;however, existing tools for the development of a conversational Chatbot user interface can be exceedingly complex. This paper presents a semi-automatic system based on the concept of MDE (Model-Driven Engineering) by which to generate a Chatbot user interface for a specific web api in accordance with the proposed BotSwagger specifications. The devised BOTEN system allows developers to integrate apis with Chatbots seamlessly. It also enables end users to input parameters, access apis, and obtain comprehensible responses promptly in a conversational way. In experiments, the proposed system proved highly effective in integrating apis with Chatbots. It makes it possible for users to input required parameters sequentially via an interactive dialogue to use web apis. The proposed system simplifies the process of creating Chatbots with api services, while largely eliminating the need for api-specific knowledge. Besides, the proposed LLMbased coordination mechanism (LLM: Large Language Model) also facilitates the creation of large-scale applications comprising multiple Chatbots.

关键词： web api model-driven engineering chatbot rasa swagger large language model

来源：评论

学校读者我要写书评

暂无评论

The IDL tool suite: Specifying and analyzing inter-parameter dependencies in web apis

引用

SOFTWAREX 2025年 29卷

作者： Barakat, Saman Martin-Lopez, Alberto Mueller, Carlos Segura, Sergio Ruiz-Cortes, Antonio Univ Seville I3US Inst SCORE Lab Seville Spain Univ Svizzera italiana Software Inst Lugano Switzerland

web apis may include inter-parameter dependencies that limit how input parameters can be combined to call services correctly. These dependencies are extremely common, appearing in 4 out of every 5 apis. This paper presents the IDL tool suite, a set of software tools for managing inter-parameter dependencies in web apis. The suite includes a specification language (IDL), an Openapi Specification extension (IDL4OAS), an analysis engine (IDLReasoner), a web api, a playground, an AI chatbot, and a website. We also highlight several contributions by different groups of authors where the IDL tool suite has proven useful in the domains of automated testing, code generation, and api gateways. To date, the IDL tool suite has contributed to the detection of more than 200 bugs in industrial apis, including GitHub, Spotify, and YouTube, among others. Also, IDL has been used to boost automated code generation, generating up to 10 times more code than state-of-the-art generators for web apis.

关键词： web api REST Openapi specification IDL

来源：评论

学校读者我要写书评

暂无评论

Fuzzing frameworks for server-side web applications: a survey

引用

INTERNATIONAL JOURNAL OF INFORMATION SECURITY 2025年第2期24卷 1-28页

作者： Dharmaadi, I. Putu Arya Athanasopoulos, Elias Turkmen, Fatih Univ Groningen Groningen Netherlands Udayana Univ Bali Indonesia Univ Cyprus Nicosia Cyprus

There are around 5.3 billion Internet users, amounting to 65.7% of the global population, and web technology is the backbone of the services delivered via the Internet. To ensure web applications are free from security-related bugs, web developers test the server-side web applications before deploying them to production. The tests are commonly conducted through the interfaces (i.e., web api) that the applications expose since they are the entry points to the application. Fuzzing is one of the most promising automated software testing techniques suitable for this task;however, the research on (server-side) web application fuzzing has been rather limited compared to binary fuzzing which is researched extensively. This study reviews the state-of-the-art fuzzing frameworks for testing web applications through web api, identifies open challenges, and gives potential future research. We collect papers from seven online repositories of peer-reviewed articles over the last ten years. Compared to other similar studies, our review focuses more deeply on revealing prior work strategies in generating valid HTTP requests for attack surface exploration, utilising security feedback from the web Under Tests (WUTs), and expanding input spaces to uncover more security-related bugs. The findings of this survey indicate that several crucial challenges need to be solved, such as less effective web instrumentation and the complexity of handling microservice applications. Furthermore, some potential research directions are also provided, such as fuzzing for web client programming. Ultimately, this paper aims to give a good starting point for further research in web api fuzzer.

关键词： Fuzzing web application web api Survey

来源：评论

学校读者我要写书评

暂无评论

Entity linking and api resource-based matchmaking for web apis composition

引用

SERVICE ORIENTED COMPUTING AND APPLICATIONS 2023年第2期17卷 93-108页

作者： Boustil, Amel Tabet, Youcef Univ Mhamed Bougara Dept Comp Sci Independance Ave Boumerdes 35000 Algeria Univ Mhamed Bougara LIMOSE Lab Independance Ave Boumerdes 35000 Algeria IGEE Univ Mhamed Bougara Inst Elect & Elect Engn Boumerdes 35000 Algeria

web apis composition is still a challenging task. In the classical semantic composition approach, the matchmaking process uses ontologies to ensure semantic matching between inputs and outputs. In this paper, we address the composition of web apis based on entity linking of web apis to a given knowledge base (KB). We first consider the apis resources that make up the main core of REST web apis. Then, we link both the api resource described in the OAS (Open api Specification) documents and the input/output attributes of web api operations to entities of the given KB. Finally, we perform discovery and composition of web apis based on their related entities extracted from the KB. Our dependency graph realizes matchmaking based on identifying similar entities of the api resources and the attributes of the requested input and output parameters. Focusing on api resources reduces the space of searching for candidate operations. Moreover, extending the user query by related similar entities adds semantics to the matchmaking process in the KB context. Experiments on the developed prototype show the feasibility and the scalability of our proposed composition approach.

关键词： web api OAS Entity linking Composition Matchmaking

来源：评论

学校读者我要写书评

暂无评论

Tool report: EvoMaster-black and white box search-based fuzzing for REST, GraphQL and RPC apis

引用

AUTOMATED SOFTWARE ENGINEERING 2025年第1期32卷 1-11页

作者： Arcuri, Andrea Zhang, Man Seran, Susruthan Galeotti, Juan Pablo Golmohammadi, Amid Duman, Onur Aldasoro, Agustina Ghianni, Hernan Kristiania Univ Coll Sch Econ Innovat & Technol Kirkegata 24-26 N-0153 Oslo Norway Oslo Metropolitan Univ Dept Comp Sci Pilestredet 35 N-0166 Oslo Norway Beihang Univ Beijing Peoples R China Univ Buenos Aires Buenos Aires Argentina

In this paper, we present the latest version 3.0.0 of EvoMaster, an open-source search-based fuzzer aimed at web apis. We discuss and present all its recent improvements, including advanced white-box heuristics, advanced search algorithms, support for databases and external services, as well as dealing with GraphQL and RPC apis besides the original use case for REST apis. The tool's installers have been downloaded more than 3000 times. EvoMaster is in daily use for fuzzing millions of lines of code in hundreds of apis in large Fortune 500 companies, such as for example the e-commerce Meituan.

关键词： Fuzzing SBST web api Tool

来源：评论

学校读者我要写书评

暂无评论

Metamorphic Testing of RESTful web apis

引用

IEEE TRANSACTIONS ON SOFTWARE ENGINEERING 2018年第11期44卷 1083-1099页

作者： Segura, Sergio Parejo, Jose A. Troya, Javier Ruiz-Cortes, Antonio Univ Seville Dept Comp Languages & Syst Seville 41004 Spain

web Application Programming Interfaces (apis) allow systems to interact with each other over the network. Modern web apis often adhere to the REST architectural style, being referred to as RESTful web apis. RESTful web apis are decomposed into multiple resources (e.g., a video in the YouTube api) that clients can manipulate through HTTP interactions. Testing web apis is critical but challenging due to the difficulty to assess the correctness of api responses, i.e., the oracle problem. Metamorphic testing alleviates the oracle problem by exploiting relations (so-called metamorphic relations) among multiple executions of the program under test. In this paper, we present a metamorphic testing approach for the detection of faults in RESTful web apis. We first propose six abstract relations that capture the shape of many of the metamorphic relations found in RESTful web apis, we call these Metamorphic Relation Output Patterns (MROPs). Each MROP can then be instantiated into one or more concrete metamorphic relations. The approach was evaluated using both automatically seeded and real faults in six subject web apis. Among other results, we identified 60 metamorphic relations (instances of the proposed MROPs) in the web apis of Spotify and YouTube. Each metamorphic relation was implemented using both random and manual test data, running over 4.7K automated tests. As a result, 11 issues were detected (3 in Spotify and 8 in YouTube), 10 of them confirmed by the api developers or reproduced by other users, supporting the effectiveness of the approach.

关键词： Metamorphic testing REST RESTful web services web api

来源：评论

学校读者我要写书评

暂无评论

Specification and Automated Analysis of Inter-Parameter Dependencies in web apis

引用

IEEE TRANSACTIONS ON SERVICES COMPUTING 2022年第4期15卷 2342-2355页

作者： Martin-Lopez, Alberto Segura, Sergio Mueller, Carlos Ruiz-Cortes, Antonio Univ Seville Res Inst Informat Engn I3US Smart Comp Syst Res & Engn Lab SCORE Seville 41004 Spain Univ Seville Res Inst Informat Engn I3US Seville 41004 Spain

web services often impose inter-parameter dependencies that restrict the way in which two or more input parameters can be combined to form valid calls to the service. Unfortunately, current specification languages for web services like the Openapi Specification (OAS) provide no support for the formal description of such dependencies, which makes it hardly possible to automatically discover and interact with services without human intervention. In this article, we present an approach for the specification and automated analysis of inter-parameter dependencies in web apis. We first present a domain-specific language, called Inter-parameter Dependency Language (IDL), for the specification of dependencies among input parameters in web services. Then, we propose a mapping to translate an IDL document into a constraint satisfaction problem (CSP), enabling the automated analysis of IDL specifications using standard CSP-based reasoning operations. Specifically, we present a catalogue of seven analysis operations on IDL documents allowing to compute, for example, whether a given request satisfies all the dependencies of the service. Finally, we present a tool suite including an editor, a parser, an OAS extension, a constraint programming-aided library, and a test suite supporting IDL specifications and their analyses. Together, these contributions pave the way for a new range of specification-driven applications in areas such as code generation and testing.

关键词： Testing Documentation web services Tools Standards Restful api Meters web api REST inter-parameter dependency DSL automated analysis

来源：评论

学校读者我要写书评

暂无评论

webapiRec: Recommending web apis to Software Projects via Personalized Ranking

引用

IEEE TRANSACTIONS ON EMERGING TOPICS IN COMPUTATIONAL INTELLIGENCE 2017年第3期1卷 145-156页

作者： Thung, Ferdian Oentaryo, Richard J. Lo, David Tian, Yuan Singapore Management Univ Sch Informat Syst Singapore 178902 Singapore

Application programming interfaces (apis) offer a plethora of functionalities for developers to reuse without rein-venting the wheel. Identifying the appropriate apis given a project requirement is critical for the success of a project, as many functionalities can he reused to achieve faster development. However, the massive number of apis would often hinder the developers' ability to quickly find the right apis. In this light, we propose a new, automated approach called webapiRec that takes as input a project profile and outputs a ranked list of web apis that can be used to implement the project. At its heart, webapiRec employs a personalized ranking model that ranks web apis specific (personalized) to a project. Based on the historical data of web api usages, webapiRec learns a model that minimizes the incorrect ordering of web apis, i.e., when a used web api is ranked lower than an unused (or a not-yet-used) web api. We have evaluated our approach on a dataset comprising 9883 web apis and 4315 web application projects from Programmableweb with promising results. For 84.0% of the projects, webapiRec is able to successfully return correct apis that are used to implement the projects in the top-five positions. This is substantially better than the recommendations provided by Program mableweb's native search functionality. webapiRec also outperforms McMillan et aL's application search engine and popularity-based recommendation.

关键词： Personalized ranking recommendation system web api

来源：评论

学校读者我要写书评

暂无评论

web apis Structures and Data Models Analysis 19

Web APIs Structures and Data Models Analysis

引用

19th IEEE International Conference on Software Architecture (ICSA)

作者： Serbout, Souhaila Di Lauro, Fabio Pautasso, Cesare Univ Svizzera Italiana Software Inst Lugano Switzerland

ISBN: (纸本)9781665494939

Microservice architectures emphasize keeping components small, to foster autonomy, low coupling and independent evolution. In this large-scale empirical study we measure the size of web api specifications mined from open source repositories. These apis are modeled using the Openapi Specification (OAS), which, in addition to documenting the offered operations, also contain schemas definitions for the data exchanged with the api request and response message payloads. This study has as a goal to build empirical knowledge about: (1) How big and diverse are real-world web apis both in terms of their operations and data, (2) How different api structures use and reuse schema definitions. By mining public software repositories on Github, we gathered 42,194 valid OAS specifications published between 2014-2021. These specifications include descriptions of web apis of well-known services providers such as Google, VMware (Avi Networks), Twilio, Amazon. After measuring the size of api structures and their data model schemas, we found that most apis are rather small. Also there is a medium correlation between the size of the apis' functional structures and their data models. api developers do reuse schema definitions within the same api model.

关键词： web api Openapi Data Model Schemas api Size Metrics api Structure

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：