{"id":"https://openalex.org/W4411088285","doi":"https://doi.org/10.1145/3713081.3731723","title":"On the Applicability of Benford\u2019s Law to Detect Saturation in Fuzzing (Registered Report)","display_name":"On the Applicability of Benford\u2019s Law to Detect Saturation in Fuzzing (Registered Report)","publication_year":2025,"publication_date":"2025-06-06","ids":{"openalex":"https://openalex.org/W4411088285","doi":"https://doi.org/10.1145/3713081.3731723"},"language":"en","primary_location":{"id":"doi:10.1145/3713081.3731723","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3713081.3731723","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 34th ACM SIGSOFT International Symposium on Software Testing and Analysis","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3713081.3731723","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Jungwoo Lee","orcid":"https://orcid.org/0009-0006-2631-2741"},"institutions":[{"id":"https://openalex.org/I157485424","display_name":"Korea Advanced Institute of Science and Technology","ror":"https://ror.org/05apxxy63","country_code":"KR","type":"education","lineage":["https://openalex.org/I157485424"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Jungwoo Lee","raw_affiliation_strings":["SoftSec Lab, KAIST, Daejeon, Republic of Korea"],"raw_orcid":"https://orcid.org/0009-0006-2631-2741","affiliations":[{"raw_affiliation_string":"SoftSec Lab, KAIST, Daejeon, Republic of Korea","institution_ids":["https://openalex.org/I157485424"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062254510","display_name":"Haeun Lee","orcid":"https://orcid.org/0000-0002-0213-8025"},"institutions":[{"id":"https://openalex.org/I157485424","display_name":"Korea Advanced Institute of Science and Technology","ror":"https://ror.org/05apxxy63","country_code":"KR","type":"education","lineage":["https://openalex.org/I157485424"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Haeun Lee","raw_affiliation_strings":["SoftSec Lab, KAIST, Daejeon, Republic of Korea"],"raw_orcid":"https://orcid.org/0000-0002-0213-8025","affiliations":[{"raw_affiliation_string":"SoftSec Lab, KAIST, Daejeon, Republic of Korea","institution_ids":["https://openalex.org/I157485424"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022983642","display_name":"Sangjun Park","orcid":null},"institutions":[{"id":"https://openalex.org/I157485424","display_name":"Korea Advanced Institute of Science and Technology","ror":"https://ror.org/05apxxy63","country_code":"KR","type":"education","lineage":["https://openalex.org/I157485424"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Sangjun Park","raw_affiliation_strings":["SoftSec Lab, KAIST, Daejeon, Republic of Korea"],"raw_orcid":"https://orcid.org/0009-0005-7379-5013","affiliations":[{"raw_affiliation_string":"SoftSec Lab, KAIST, Daejeon, Republic of Korea","institution_ids":["https://openalex.org/I157485424"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5031854438","display_name":"Sang Kil","orcid":"https://orcid.org/0000-0002-6012-7228"},"institutions":[{"id":"https://openalex.org/I157485424","display_name":"Korea Advanced Institute of Science and Technology","ror":"https://ror.org/05apxxy63","country_code":"KR","type":"education","lineage":["https://openalex.org/I157485424"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Sang Kil Cha","raw_affiliation_strings":["SoftSec Lab, KAIST, Daejeon, Republic of Korea"],"raw_orcid":"https://orcid.org/0000-0002-6012-7228","affiliations":[{"raw_affiliation_string":"SoftSec Lab, KAIST, Daejeon, Republic of Korea","institution_ids":["https://openalex.org/I157485424"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I157485424"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"116","last_page":"123"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T13720","display_name":"Benford\u2019s Law and Fraud Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/2613","display_name":"Statistics and Probability"},"field":{"id":"https://openalex.org/fields/26","display_name":"Mathematics"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T13720","display_name":"Benford\u2019s Law and Fraud Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/2613","display_name":"Statistics and Probability"},"field":{"id":"https://openalex.org/fields/26","display_name":"Mathematics"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9692999720573425,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11492","display_name":"Academic integrity and plagiarism","score":0.9143000245094299,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.926440417766571},{"id":"https://openalex.org/keywords/benfords-law","display_name":"Benford's law","score":0.7549744248390198},{"id":"https://openalex.org/keywords/saturation","display_name":"Saturation (graph theory)","score":0.4689868092536926},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.4461197555065155},{"id":"https://openalex.org/keywords/statistics","display_name":"Statistics","score":0.2567770481109619},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.23908519744873047},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.14252954721450806},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.1375122368335724}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.926440417766571},{"id":"https://openalex.org/C152636012","wikidata":"https://www.wikidata.org/wiki/Q817168","display_name":"Benford's law","level":2,"score":0.7549744248390198},{"id":"https://openalex.org/C9930424","wikidata":"https://www.wikidata.org/wiki/Q7426587","display_name":"Saturation (graph theory)","level":2,"score":0.4689868092536926},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4461197555065155},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.2567770481109619},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.23908519744873047},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.14252954721450806},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.1375122368335724},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3713081.3731723","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3713081.3731723","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 34th ACM SIGSOFT International Symposium on Software Testing and Analysis","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3713081.3731723","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3713081.3731723","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 34th ACM SIGSOFT International Symposium on Software Testing and Analysis","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.5400000214576721,"display_name":"Reduced inequalities","id":"https://metadata.un.org/sdg/10"}],"awards":[{"id":"https://openalex.org/G5055464087","display_name":null,"funder_award_id":"RS-2024-00440780","funder_id":"https://openalex.org/F4320328359","funder_display_name":"Ministry of Science and ICT, South Korea"}],"funders":[{"id":"https://openalex.org/F4320328359","display_name":"Ministry of Science and ICT, South Korea","ror":"https://ror.org/01wpjm123"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W1835421862","https://openalex.org/W1976003238","https://openalex.org/W1987807119","https://openalex.org/W2043225555","https://openalex.org/W2050340253","https://openalex.org/W2053872675","https://openalex.org/W2112575799","https://openalex.org/W2128128820","https://openalex.org/W2190026262","https://openalex.org/W2490830488","https://openalex.org/W2535617737","https://openalex.org/W2901725274","https://openalex.org/W2945321197","https://openalex.org/W2979357014","https://openalex.org/W3082737479","https://openalex.org/W3089794841","https://openalex.org/W3101845936","https://openalex.org/W3129869904","https://openalex.org/W3194771370","https://openalex.org/W3195980781","https://openalex.org/W3213281326","https://openalex.org/W4212949483","https://openalex.org/W4252547921","https://openalex.org/W4313563712","https://openalex.org/W4315865063","https://openalex.org/W4322775627","https://openalex.org/W4323065352","https://openalex.org/W4324121459","https://openalex.org/W4324192566","https://openalex.org/W4384155571","https://openalex.org/W4384163171","https://openalex.org/W4384302804","https://openalex.org/W4394746119","https://openalex.org/W4400583131"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2511770387","https://openalex.org/W3120811337","https://openalex.org/W2766647240","https://openalex.org/W4385301282","https://openalex.org/W2990186179","https://openalex.org/W4210660460","https://openalex.org/W3203597304"],"abstract_inverted_index":{"Knowing":[0],"when":[1,93,123],"a":[2,46],"fuzzing":[3,53,75,100,161],"campaign":[4],"has":[5],"reached":[6],"saturation":[7,29,51,126],"is":[8,111],"crucial":[9],"for":[10,26],"practitioners":[11],"to":[12,49,133,137,159],"avoid":[13],"unnecessarily":[14],"lengthy":[15],"campaigns":[16],"without":[17],"missing":[18],"bugs":[19],"within":[20],"given":[21],"resources.":[22],"Unfortunately,":[23],"existing":[24],"solutions":[25],"determining":[27],"the":[28,60,74,79,94,99,146],"point":[30],"rely":[31],"on":[32,55,141],"coverage":[33],"measurements,":[34],"which":[35,58],"are":[36],"often":[37],"error-prone":[38],"and":[39,150],"unreliable.":[40],"In":[41],"this":[42],"paper,":[43],"we":[44,67],"present":[45],"novel":[47],"way":[48],"detect":[50,160],"in":[52,73,119],"based":[54],"Benford's":[56,91,157],"law,":[57],"describes":[59],"characteristics":[61],"of":[62,81],"naturally":[63],"occurring":[64,71],"numbers.":[65],"Specifically,":[66],"hypothesize":[68],"that":[69,112,153],"repeatedly":[70],"numbers":[72],"process,":[76],"such":[77],"as":[78,118],"number":[80],"mutated":[82],"bytes,":[83],"should":[84],"show":[85,152],"specific":[86],"numerical":[87],"patterns":[88],"dictated":[89],"by":[90],"law":[92,158],"fuzzer":[95],"reaches":[96],"saturation,":[97],"thereby":[98],"process":[101],"becomes":[102],"less":[103,116],"biased":[104,117],"(hence,":[105],"more":[106],"natural).":[107],"The":[108],"key":[109],"observation":[110],"grey-box":[113],"fuzzers":[114],"become":[115],"random":[120],"black-box":[121],"testing":[122],"they":[124],"reach":[125],"because":[127],"there":[128],"will":[129],"be":[130],"no":[131],"seed":[132],"prioritize.":[134],"We":[135],"aim":[136],"test":[138],"our":[139],"hypothesis":[140],"29":[142],"real-world":[143],"programs":[144],"using":[145],"state-of-the-art":[147],"fuzzer,":[148],"AFL++,":[149],"empirically":[151],"one":[154],"can":[155],"use":[156],"saturation.":[162]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}