论文标题
模糊微服务:带有Evomaster的工业系统行业的一系列用户研究
Fuzzing Microservices: A Series of User Studies in Industry on Industrial Systems with EvoMaster
论文作者
论文摘要
凭借数千种网络服务的微服务架构,用于为6.3亿客户提供服务,像Meituan这样的公司在验证和验证其软件方面面临着几个挑战。本文报告了我们将evomaster(基于搜索的白框绒布)整合到Meituan的测试过程中的经验。在2021年和2023年进行了两项用户研究,分别评估了两个版本的Evomaster,以解决用于工业网络服务的测试生成,这些工业网络服务是大型电子商务微服务系统的一部分。两项用户研究涉及来自Meituan的五个API和27名工业参与者的321,131行代码。在Meituan的员工两家用户研究中,都进行了问卷和访谈。两项用户研究表明,Evomaster(即代码覆盖范围和故障检测)的明显优势,并且迫切需要在工业微服务测试中拥有这样的模糊器。为了研究这些结果如何概括,在2024年进行了后续用户研究,其中五家不同的公司中的五名工程师。我们的结果表明,除了清晰的实用性外,研究界仍需要进行许多关键挑战,以进一步提高绩效。
With several microservice architectures comprising of thousands of web services, used to serve 630 million customers, companies like Meituan face several challenges in the verification and validation of their software. This paper reports on our experience of integrating EvoMaster (a search-based white-box fuzzer) in the testing processes at Meituan over almost 2 years. Two user studies were carried out in 2021 and in 2023 to evaluate two versions of EvoMaster, respectively, in tackling the test generation for industrial web services which are parts of a large e-commerce microservice system. The two user studies involve in total 321,131 lines of code from five APIs and 27 industrial participants at Meituan. Questionnaires and interviews were carried out in both user studies with employees at Meituan. The two user studies demonstrate clear advantages of EvoMaster (i.e., code coverage and fault detection) and the urgent need to have such a fuzzer in industrial microservices testing. To study how these results could generalize, a follow up user study was done in 2024 with five engineers in the five different companies. Our results show that, besides their clear usefulness, there are still many critical challenges that the research community needs to investigate to improve performance further.