K-Scheduler: Effective Seed Scheduling for Fuzzing with Graph Centrality Analysis (IEEE S&P'22)

A universal seed scheduler for fuzzers (LibFuzzer and AFL havoc mode) and concolic execution engine (QSYM). Watch the following 1 minute video to get a sense about how K-Scheduler works. Check our paper, Oakland video and slides for more details.

Prerequisite

• Python 3.7
• LLVM 11.0.1
• wllvm
• NetworKit

Usage

We use harfbuzz as an example

1. Open a terminal to run LibFuzzer:

   ./harfbuzz-1.3.2-fsanitize_fuzzer_kscheduler -kscheduler=1 -min_num_mutations_for_each_seed=200 ./tmp_seeds/ seeds/

2. Open another terminal to run graph analysis module:

   python3 ./gen_dyn_weight.py

Tested programs

We provide 12 programs from Google FuzzBench to reproduce our results, K-Scheduler/libfuzzer_integration/test_programs, K-Scheduler/afl_integration/test_programs and K-Scheduler/qsym_integration/test_programs

Run K-Scheduler on a new program

Check tutorials at K-Scheduler/libfuzzer_integration/build_example, K-Scheduler/afl_integration/build_example and K-Scheduler/qsym_integration/build_example

Contact

Feel free to send me email about K-Scheduler. dongdong at cs.columbia.edu