Dice Question Streamline Icon: https://streamlinehq.com

Relationship between cumulative continuous fuzzing sessions and bug detection rate

Determine the relationship between the cumulative number of continuous fuzzing sessions and the fuzzing bug detection rate in continuous fuzzing environments.

Information Square Streamline Icon: https://streamlinehq.com

Background

Continuous fuzzing (e.g., OSS-Fuzz) runs short fuzzing sessions frequently within CI pipelines rather than single long campaigns. Understanding whether bug discovery persists or diminishes as sessions accumulate is critical for resource allocation and long-term fuzzing strategy.

The authors frame this as a foundational unknown motivating RQ1: if detection remains high with more sessions, sustained continuous fuzzing is justified; if it decays rapidly, adaptive scheduling may be preferable.

References

However, the relationship between the cumulative number of fuzzing sessions and the bug detection rate remains unclear.

Large-Scale Empirical Analysis of Continuous Fuzzing: Insights from 1 Million Fuzzing Sessions (2510.16433 - Shirai et al., 18 Oct 2025) in Section 3 (Research Questions), paragraph preceding RQ1