TY - GEN
T1 - Microusity
T2 - 31st IEEE/ACM International Conference on Program Comprehension, ICPC 2023
AU - Rattanukul, Pattarakrit
AU - Makaranond, Chansida
AU - Watanakulcharus, Pumipat
AU - Ragkhitwetsagul, Chaiyong
AU - Nearunchorn, Tanapol
AU - Visoottiviseth, Vasaka
AU - Choetkiertikul, Morakot
AU - Sunetnanta, Thanwadee
N1 - Publisher Copyright:
© 2023 IEEE.
PY - 2023
Y1 - 2023
N2 - Microservice software architecture is more scalable and efficient than its monolithic predecessor. Despite its increasing adoption, microservices might expose security concerns and issues that are distinct from those associated with monolithic designs. We propose Microusity, a tool that performs RESTful API testing on a specific type of microservice pattern called backends for frontends (BFF). We design a novel approach to trace BFF requests using the port mapping between requests to BFF and the sub-requests sent to backend microservices. Furthermore, our tool can pinpoint which of the backend service causing the internal server error, which may lead to unhandled errors or vulnerabilities. Microusity provides an error report and a graph visualization that reveal the source of the error and supports developers in comprehension and debugging of the errors. The evaluation of eight software practitioners shows that Microusity and its test reports are useful for investigating and understanding problems in BFF systems. The prototype tool and the video demo of the tool can be found at https://github.com/MUICT-SERU/MICROUSITY.
AB - Microservice software architecture is more scalable and efficient than its monolithic predecessor. Despite its increasing adoption, microservices might expose security concerns and issues that are distinct from those associated with monolithic designs. We propose Microusity, a tool that performs RESTful API testing on a specific type of microservice pattern called backends for frontends (BFF). We design a novel approach to trace BFF requests using the port mapping between requests to BFF and the sub-requests sent to backend microservices. Furthermore, our tool can pinpoint which of the backend service causing the internal server error, which may lead to unhandled errors or vulnerabilities. Microusity provides an error report and a graph visualization that reveal the source of the error and supports developers in comprehension and debugging of the errors. The evaluation of eight software practitioners shows that Microusity and its test reports are useful for investigating and understanding problems in BFF systems. The prototype tool and the video demo of the tool can be found at https://github.com/MUICT-SERU/MICROUSITY.
KW - API security
KW - fuzzing
KW - microservices
KW - testing
UR - https://www.scopus.com/pages/publications/85166370745
U2 - 10.1109/ICPC58990.2023.00021
DO - 10.1109/ICPC58990.2023.00021
M3 - Conference contribution
AN - SCOPUS:85166370745
T3 - IEEE International Conference on Program Comprehension
SP - 74
EP - 78
BT - Proceedings - 2023 IEEE/ACM 31st International Conference on Program Comprehension, ICPC 2023
PB - IEEE Computer Society
Y2 - 15 May 2023 through 16 May 2023
ER -