Validation of rest API backward compatibility with differential coverage-guided feedback fuzzing

A differential coverage-guided feedback (CGF) fuzzing system for identifying regressions in a software application, comprising:

• a computing device, comprising a processor and a communication module, wherein the computing device is configured to execute instructions that:
• perform a fuzzing iteration to execute instructions that:
• generate input data based on an initial corpus of samples;
• communicate the input data to a first application such that the first application performs operations utilizing the input data;
• collect first coverage information from the first application to identify first regressions;
• communicate the input data to a second application such that the second application performs operations utilizing the input data;
• and
• collect second coverage information from the second application to identify second regressions;
• compare the first coverage information and the second coverage information;
• and
• perform another fuzzing iteration, wherein the computing device is configured to execute instructions that generate input data based on the compared first and second coverage information.

A non-transitory tangible computer-readable device having instructions stored thereon that, when executed by a computing device, cause the computing device to perform operations comprising:

• performing a fuzzing iteration to execute instructions that:
• generating input data based on an initial corpus of samples;
• communicating the input data to a first application such that the first application performs operations utilizing the input data;
• collecting first coverage information from the first application to identify first regressions;
• communicating the input data to a second application such that the second application performs operations utilizing the input data;
• and
• collecting second coverage information from the second application to identify second regressions;
• comparing the first coverage information and the second coverage information;
• performing another fuzzing iteration, wherein the computing device is configured to execute instructions that generate input data based on the compared first and second coverage information.