Fuzzing REST APIs in Industry: Volkswagen Case Study Reveals Feature Gaps in Academic Tools
arXiv·medium signal
A collaboration between Volkswagen AG and academic researchers evaluates EvoMaster (search-based REST API fuzzer) against real automotive industry APIs. The paper identifies concrete feature gaps between academic API fuzzing tools and enterprise requirements — authentication schemes, stateful session handling, and domain-specific constraints that break automated testing. Published as a practical roadmap for improving API security testing tooling.