K-Scheduler: Effective Seed Scheduling for Fuzzing with Graph Centrality Analysis (IEEE S&P’22)

A generic seed scheduler for fuzzers (LibFuzzer and AFL) and concolic execution engine (QSYM). Check our paper for more details.

Prerequisite

Usage

We use harfbuzz as an example

  1. Open a terminal to run LibFuzzer:
    ./harfbuzz-1.3.2-fsanitize_fuzzer_kscheduler -kscheduler=1 -min_num_mutations_for_each_seed=200 ./tmp_seeds/ seeds/
  2. Open another terminal to run graph analysis module:
    python3 ./gen_dyn_weight.py

Tested programs

We provide 12 programs from Google FuzzBench to reproduce our results, K-Scheduler/libfuzzer_integration/test_programs and K-Scheduler/afl_integration/test_programs

Run K-Scheduler on a new program

Check tutorials at K-Scheduler/libfuzzer_integration/test_programs and K-Scheduler/afl_integration/test_programs

Contact

Feel free to send me email about K-Scheduler. dongdong at cs.columbia.edu

GitHub

View Github