NAUTILUS: Automated RESTful API Vulnerability Detection
NAUTILUS: Automated RESTful API Vulnerability Detection
Gelei Deng,Zhiyi Zhang,5 Authors,Dongjin Wang
2023 · DBLP: conf/uss/DengZLL00YW23
USENIX Security Symposium · 28 Citations
TLDR
N AUTILUS is proposed, which includes a novel specification annotation strategy to uncover RESTful API vulnerabilities that require the execution of multiple API operations in the correct sequence, and can successfully detect an average of 141% more vulnerabilities and cover 104% more API operations.