Communication Dans Un Congrès Année : 2025

Fuzzing graph database applications with graph transformations

Résumé

Graph databases have surged in popularity, and applications increasingly employ them to store and retrieve interconnected data. However, testing graph database-backed applications has distinctive challenges. Due to the sheer dimension of the graph schema state space, testing applications using naive random graph instances is unlikely to cover a large portion of an application program. We present PGFuzz, a graph transformation-based greybox fuzzer for testing graph database-backed applications, that is, to the best of our knowledge, the first fuzzer to specifically target graph database applications. PGFuzz builds on top of state-of-the-art graph generators and utilizes graph transformations guided by code coverage to produce application test inputs. PGFuzz ’s graph transformations are schema-aware and support recently introduced graph schema, key, and cardinality constraints. We evaluate PGFuzz on graph database applications that we curate from open-source repositories and show that PGFuzz substantially improves the test coverage of graph database-backed applications compared to the state of the art.

Fichier principal
Vignette du fichier
icgt_2025.pdf (966.69 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Licence

Dates et versions

hal-05117893 , version 1 (18-06-2025)

Licence

Identifiants

Citer

Stefania Dumbrava, Melchior W. Oudemans, Burcu Kulahcioglu Ozkan. Fuzzing graph database applications with graph transformations. International Conference on Graph Transformations (ICGT), Jun 2025, Koblenz, Germany. pp.135-156, ⟨10.1007/978-3-031-94706-3_7⟩. ⟨hal-05117893⟩
267 Consultations
387 Téléchargements

Altmetric

Partager

  • More