Automated Validation of Service-Oriented and API-Based Enterprise Systems for Reliable Digital Transformation in Saudi Arabia

References

[1] Waseem M, Liang P, Márquez G, Di Salle A. Testing microservices architecture-based applications: a systematic mapping study. In: 27th Asia-Pacific Software Engineering Conference; 2020. p. 119–128. https://doi.org/10.1109/APSEC51365.2020.00020

[2] Martin-Lopez A, Segura S, Ruiz-Cortés A. RESTest: black-box constraint-based testing of RESTful web APIs. In: Service-Oriented Computing; 2020. p. 459–475. https://doi.org/10.1007/978-3-030-65310-1_33

[3] Atlidakis V, Godefroid P, Polishchuk M. Checking security properties of cloud service REST APIs. In: IEEE International Conference on Software Testing, Validation and Verification; 2020. https://doi.org/10.1109/ICST46399.2020.00046

[4] Arcuri A, Galeotti JP, Marculescu B, Zhang M. EvoMaster: a search-based system test generation tool. Journal of Open Source Software. 2021;6(57):2153. https://doi.org/10.21105/joss.02153

[5] Arcuri A. Automated black- and white-box testing of RESTful APIs with EvoMaster. IEEE Software. 2021;38(3):72–78. https://doi.org/10.1109/MS.2020.3013820

[6] Sigalov K, Ye X, König M, Hagedorn P, Blum F, Severin B, et al. Automated payment and contract management in the construction industry by integrating building information modeling and blockchain-based smart contracts. Applied Sciences. 2021;11:7653. https://doi.org/10.3390/app11167653

[7] Zhang M, Arcuri A. Adaptive hypermutation for search-based system test generation: a study on REST APIs with EvoMaster. ACM Transactions on Software Engineering and Methodology. 2021;31(1). https://doi.org/10.1145/3464940

[8] Martin-Lopez A, Segura S, Ruiz-Cortés A. RESTest: automated black-box testing of RESTful web APIs. In: International Symposium on Software Testing and Analysis; 2021. https://doi.org/10.1145/3460319.3469082

[9] Martin-Lopez A, Segura S, Müller C, Ruiz-Cortés A. Specification and automated analysis of inter-parameter dependencies in web APIs. IEEE Transactions on Services Computing. 2022;15(4):2342–2355. https://doi.org/10.1109/TSC.2021.3050610

[10] Corradini D, Zampieri A, Pasqua M, Viglianisi E, Dallago M, Ceccato M. Automated black-box testing of nominal and error scenarios in RESTful APIs. Software Testing, Verification and Reliability. 2022;32. https://doi.org/10.1002/stvr.1808

[11] Liu Y, Li Y, Deng G, Liu Y, Wan R, Wu R, et al. Morest: model-based RESTful API testing with execution feedback. In: International Conference on Software Engineering; 2022. https://doi.org/10.1145/3510003.3510133

[12] Liu Y, Li Y, Liu Y, Wan R, Wu R, Liu Q. Morest: industry practice of automatic RESTful API testing. 2022. https://doi.org/10.1145/3551349.3559498

[13] Martin-Lopez A, Segura S, Ruiz-Cortés A. Online testing of RESTful APIs: promises and challenges. In: ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering; 2022. https://doi.org/10.1145/3540250.3549144

[14] Camilli M, Guerriero A, Janes A, Russo B, Russo S. Microservices integrated performance and reliability testing. In: International Conference on Automation of Software Test; 2022. p. 29–39. https://doi.org/10.1145/3524481.3527233

[15] Camilli M, Janes AA, Russo B. Automated test-based learning and verification of performance models for microservices systems. Journal of Systems and Software. 2022;187:111225. https://doi.org/10.1016/j.jss.2022.111225

[16] Sedghpour MRS, Klein C, Tordsson J. An empirical study of service mesh traffic management policies for microservices. In: ACM/SPEC International Conference on Performance Engineering; 2022. p. 17–27. https://doi.org/10.1145/3489525.3511686

[17] Ehsan A, Abuhaliqa MAME, Catal C, Mishra D. RESTful API testing methodologies: rationale, challenges, and solution directions. Applied Sciences. 2022;12:4369. https://doi.org/10.3390/app12094369

[18] Kosińska J, Baliś B, Konieczny M, Malawski M, Zieliński S. Toward the observability of cloud-native applications: the overview of the state-of-the-art. IEEE Access. 2023;11:73036–73052. https://doi.org/10.1109/ACCESS.2023.3281860

[19] Monteiro D, Yu Y, Zisman A, Nuseibeh B. Adaptive observability for forensic-ready microservice systems. IEEE Transactions on Services Computing. 2023;16(5):3196–3209. https://doi.org/10.1109/TSC.2023.3290474

[20] Zdun U, Quèval PJ, Simhandl G, Scandariato R, Chakravarty S, Jelic M, et al. Microservice security metrics for secure communication, identity management, and observability. ACM Transactions on Software Engineering and Methodology. 2023;32(1):1–34. https://doi.org/10.1145/3532183

[21] Giamattei L, Guerriero A, Pietrantuono R, Russo S. Automated functional and robustness testing of microservice architectures. Journal of Systems and Software. 2024;207:111857. https://doi.org/10.1016/j.jss.2023.111857

[22] Pan L, Cohney S, Murray T, Pham VT. EDEFuzz: a web API fuzzer for excessive data exposures. In: International Conference on Software Engineering; 2024. https://doi.org/10.1145/3597503.3608133

[23] Golmohammadi A, Zhang M, Arcuri A. Testing RESTful APIs: a survey. ACM Transactions on Software Engineering and Methodology. 2024;33(1). https://doi.org/10.1145/3617175

[24] Alharbi AS, Halikias G, Rajarajan M, Yamin M. A review of effectiveness of Saudi E-government data security management. International Journal of Information Technology. 2021;13:573–579. https://doi.org/10.1007/s41870-021-00611-3

[25] Hui M, Wang L, Li H, Yang R, Song Y, Zhuang H, et al. Unveiling the microservices testing methods, challenges, solutions, and solution gaps: a systematic mapping study. Journal of Systems and Software. 2025;220:112232. https://doi.org/10.1016/j.jss.2024.112232

[26] Schwarz GD, Quast F, Riehle D. Ensuring syntactic interoperability using consumer-driven contract testing. Software Testing, Verification and Reliability. 2025;35(5):e70006. https://doi.org/10.1002/stvr.70006

[27] Barakat S, Martin-Lopez A, Müller C, Segura S, Ruiz-Cortés A. The IDL tool suite: specifying and analyzing inter-parameter dependencies in web APIs. SoftwareX. 2025;29:101998. https://doi.org/10.1016/j.softx.2024.101998

[28] Ali MA, Salih SM. Impact of application programming interfaces (APIs) economy on digital economics in Saudi Arabia. Sustainability. 2025;17:4104. https://doi.org/10.3390/su17094104

[29] Al-Hawamleh AM. Investigating the multifaceted dynamics of cybersecurity practices and their impact on the quality of e-government services: evidence from the KSA. Digital Policy, Regulation and Governance. 2024;26(3):317–336. https://doi.org/10.1108/DPRG-11-2023-0168

[30] Makki AA, Alqahtani AY. Modeling the barriers surrounding digital government implementation: revealing prospect opportunities in Saudi Arabia. Sustainability. 2022;14:15780. https://doi.org/10.3390/su142315780

@article{1723947,
      author = {Hossam Kenawy},
      title = {Automated Validation of Service-Oriented and API-Based Enterprise Systems for Reliable Digital Transformation in Saudi Arabia},
      journal = {Iconic Research And Engineering Journals},
      year = {2026},
      volume = {10},
      number = {4},
      pages = {1613-1626},
      issn = {2456-8880},
      url = {https://www.irejournals.com/formatedpaper/1723947.pdf},
      abstract = {The extent to which Saudi Arabia is undergoing a digital transformation now relies on enterprise platforms that are put together using APIs, service-oriented components, microservices, identity services, data stores, and capabilities that are managed externally. This architectural modularity speeds up the delivery process but at the same time spreads out any potential failures across the interface contracts, the parameter dependencies, the workflow state, the data semantics, the performance, the security, and the runtime operations. A service may therefore pass local tests yet the entire public or enterprise transaction end-to-end will still be unreliable. This review brings together recent evidence on automated validation methods that have been published between 2020 and 2025 and presents an integrated assurance framework aimed at achieving reliable digital transformation in Saudi Arabia. The review looks at specification-driven API testing, dependency-aware test generation, contract testing, cross-service functional and robustness testing, performance verification, security testing, and observability. Thirty peer-reviewed sources, verified by DOI, were chosen as part of a protocol-led evidence review with a focus on automation, architectural relevance, empirical support, and suitability for use in enterprise systems. The synthesis indicates that no one test technique offers enough assurance for distributed digital services; reliability instead comes from a layered body of evidence that links interface correctness with stateful workflows, service interoperability, resilience in the face of failure, security controls, and production telemetry. The paper suggests a seven-stage automated validation architecture and a continuous-assurance maturity pathway which transform diverse evidence into clear decisions regarding releases and governance. For Saudi organisations, the framework stresses interoperability, service continuity, auditable changes, and evidence-based risk control, thus connecting software engineering practice with the level of operational reliability required by national digital transformation programmes.},
      month = {October},
  }