J4 ›› 2015, Vol. 42 ›› Issue (4): 20-26+40.doi: 10.3969/j.issn.1001-2400.2015.04.004

• Original Articles • Previous Articles     Next Articles

Algorithm for discovering SNMP protocol vulnerability

WANG Zhiqiang1;ZHANG Yuqing1,2;LIU Qixu2;HUANG Tingpei2   

  1. (1. State Key Lab. of Integrated Service Networks, Xidian Univ., Xi'an  710071, China;
    2. National Computer Network Intrusion Protection Center, Univ. of the Chinese Academy of Sciences, Beijing  100190, China)
  • Received:2014-03-12 Online:2015-08-20 Published:2015-10-12
  • Contact: WANG Zhiqiang E-mail:wangzq@nipc.org.cn

PDF (PC)

612

Like

Cited

2

Abstract:

An algorithm for discovering SNMP protocol vulnerabilities is proposed, which solves several problems including single and one-dimensional strategies of constructing test cases, lack of the exception monitor and debugger or inapplicability of the network and SNMP-related software. First, by analyzing the SNMP RFC specification, the algorithm adopts the generation strategy for constructing test cases. Second, the mutation strategy is adopted to construct test cases on the basis of known information about SNMP vulnerabilities and the previous malformed data. According to the algorithm, a tool named tje SRPFuzzer is developed for bug hunting. Finally, an experiment is done on routers and software, including the Cisco router, wireshark and so on. Four groups of vulnerabilities are found, which verifies the SRPFuzzer's validity. Meanwhile, comparing with the PROTOS and other 3 tools, the SRPFuzzer is superior to these tools at test case construction, monitoring, debugging, bug hunting ability and so on.

Key words: network protocols, network security, vulnerability discovering, Fuzzing


Copyright © 2018 Journal of Xidian University, All Rights Reserved.
Powered by Beijing Magtech Co. Ltd