Search-based Security Testing of Enterprise Microservices

This article presents Ph.D. research that focuses on the possibilities of adopting search-based software testing methods for microservice-based software systems to improve the software's quality and security. The research is aimed at exploring the possibilities of automatically mocking external web service dependencies of the system under test and detecting security faults through different entry points (e.g., external web services and messaging backbones) using search-based white-box fuzzing. Additionally, the article also discusses the evaluation method, the current status of the research, potential outcomes, and the contribution of the research.