中文摘要：

提出一种简单网络管理协议漏洞挖掘算法，优化了测试用例构造策略，解决了单一的测试用例构造策略、缺少异常监控和调试器或监控和调试不适用等问题。首先，根据简单网络管理协议的 RFC 文档，使用基于生成的多维策略构造测试用例；其次，根据已知漏洞数据和异常数据，使用基于变异的多维策略构造测试用例。根据算法，开发了一个漏洞工具 SRPFuzzer ，并选择思科路由器、wireshark 等路由器和软件进行实验，发现了4类安全漏洞，证明了工具的有效性；同时，选择 PROTOS 等相关的漏洞挖掘工具进行对比，SRPFuzzer 在测试用例构造、监控和调试、漏洞挖掘能力等方面均优于以往的工具。

英文摘要：

An algorithm for discovering SNMP protocol vulnerabilities is proposed , which solves several problems including single and one‐dimensional strategies of constructing test cases , lack of the exception monitor and debugger or inapplicability of the network and SNMP‐related software . First , by analyzing the SNM P RFC specification , the algorithm adopts the generation strategy for constructing test cases . Second , the mutation strategy is adopted to construct test cases on the basis of known information about SNMP vulnerabilities and the previous malformed data . According to the algorithm , a tool named tje SRPFuzzer is developed for bug hunting . Finally , an experiment is done on routers and software , including the Cisco router , wireshark and so on . Four groups of vulnerabilities are found , which verifies the SRPFuzzer＆#39;s validity . Meanwhile , comparing with the PROTOS and other 3 tools , the SRPFuzzer is superior to these tools at test case construction , monitoring , debugging , bug hunting ability and so on .