RESTlogic: Detecting Logic Vulnerabilities in Cloud REST APIs  

作　　者：Ziqi Wang Weihan Tian Baojiang Cui 

机构地区：[1]School of Cyberspace Security,Beijing University of Posts and Telecommunications,Beijing,100876,China

出　　处：《Computers, Materials & Continua》2024年第2期1797-1820,共24页计算机、材料和连续体（英文）

摘　　要：logical testing model and resource lifecycle information,generate test cases and complete parameters,and alleviate inconsistency issues through parameter inference.Once again,we propose a method of analyzing test results using joint state codes and call stack information,which compensates for the shortcomings of traditional analysis methods.We will apply our method to testing REST services,including OpenStack,an open source cloud operating platform for experimental evaluation.We have found a series of inconsistencies,known vulnerabilities,and new unknown logical defects.

关 键 词：Cloud services RESTful API logic defects inconsistency issues 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]