Web API Verifier for IoTtalk and Its Applications

With the vigorous development of Internet of Things (IoT) applications, many IoT applications based on IoTtalk, such as EduTalk, ScratchTalk, and other X-Talk systems, have been created in recent years. Most of these IoT applications are developed using Web application programming interface (API) and thus enable web browsers to transfer data to applications. But in the development stage, unknown errors or unexpected results may occur. It is hard to manually design test cases to detect such flaws efficiently, and automatic testing tools often require much domain knowledge. This work combines Fuzzing technology to develop a graphical user interface (GUI) test system, Web API Verifier (WAV), for IoTtalk and X-Talk developers to automatically test their applications easily. WAV integrates Swagger Editor and RESTler-fuzzer. According to the uploaded source codes, it generates the corresponding drafts of OpenAPI documents. By filling the several fields in WAV GUI, developers can quickly describe the Web API specification of their applications and build the settings required for the RESTler-fuzzer test. After the test, WAV provides a GUI displaying the file location and row number for each buggy function. With WAV, users can write API documents and test their IoT applications conveniently.