Application Layer Covert Channel Analysis and ... - Bill Buchanan

More documents

Recommendations

Info

Z. Kwecka, BSc (Hons) Network Computing, 2006 134/// /// Menu File Exit - Terminates the application/// /// /// private void menuItem3_Click(object sender, System.EventArgs e){if(mcStop.Enabled == true){device.PcapStopCapture();device.PcapClose();}<strong>Application</strong>.Exit();}/// /// lvCon selected h<strong>and</strong>ler - displays packets of the selected conversation inlvPackets/// /// /// private void lvCon_SelectedIndexChanged(object sender, System.EventArgs e){if(lvCon.SelectedItems.Count > 0){ConTrackingColl connection = (ConTrackingColl)sigSyncArray[lvCon.SelectedIndices[0]];int vnCounter = 0;lbHeaders.Items.Clear();headerSyncArray.Clear();for(int i=0;i 0){byte [] b = oPacket.Data;headers = format.GetString(b);if((textBox1.Text != "" && headers.IndexOf(textBox1.Text)>-1)||textBox1.Text ==""){Regex r = new Regex("\r\n");int a = 0;int iteratorIndex = 0;
Z. Kwecka, BSc (Hons) Network Computing, 2006 135int index1;string separator = ":";string [] originalHeaders = r.Split(headers);string host = "Unknown";string agent = "Unknown";if(originalHeaders.Length>1){string [] modifiedHeaders = new string[originalHeaders.Length-1];foreach(string singleHeader in originalHeaders){if(singleHeader != "" && iteratorIndex > 0)//finds empty line - the start ofthe content{if(singleHeader.IndexOf(':')>0){string [] lineSplit = singleHeader.Split(separator.ToCharArray(),2);modifiedHeaders[iteratorIndex-1] = lineSplit[0]+"\t\t" +lineSplit[1];}else{modifiedHeaders[iteratorIndex-1] = singleHeader+"\t\t";}//modifiedHeaders[iteratorIndex-1] = singleHeader;a=0;}else if(singleHeader == ""){a++;break;}iteratorIndex++;} //end for each single headerint iter2 = 0;foreach(string modifiedHeader in modifiedHeaders){if(modifiedHeader != "" && modifiedHeader != null){headerSyncArray.Add(modifiedHeader);lbHeaders.Items.Add(modifiedHeader);if(device.PcapOpened)sw.WriteLine(modifiedHeader);}else{break;}iter2++;}//end foreach modified header}//end if more than one line in headers}//end if textBox1 matches} //end if lenght > 0} //end if mathes the destination settings}private void mhDoc_Click(object sender, System.EventArgs e){//insert code here}private void cbDump_CheckedChanged(object sender, System.EventArgs e){if(cbDump.Checked == true){if(ofdDump.ShowDialog() ==DialogResult.Cancel){cbDump.Checked = false;return;}
Page 1 and 2:
Application Layer Covert ChannelAna
Page 3 and 4:
Z. Kwecka, BSc (Hons) Network Compu
Page 5 and 6:
Page 7 and 8:
Page 9 and 10:
Page 11:
Page 14:
Page 17 and 18:
Page 19 and 20:
Page 21 and 22:
Page 23 and 24:
Page 25:
Page 28 and 29:
Page 30 and 31:
Page 32 and 33:
Page 34 and 35:
Page 36 and 37:
Page 38 and 39:
Page 40 and 41:
Page 42 and 43:
Page 44 and 45:
Page 46 and 47:
Page 48 and 49:
Page 50 and 51:
Page 52 and 53:
Page 54 and 55:
Page 56:
Page 60 and 61:
Page 63 and 64:
Page 65 and 66:
Page 67 and 68:
Page 69 and 70:
Page 71 and 72:
Page 73 and 74:
Page 75 and 76:
Page 77 and 78:
Page 79 and 80:
Page 81 and 82:
Page 83 and 84: Z. Kwecka, BSc (Hons) Network Compu
Page 113: Z. Kwecka, BSc (Hons) Network Compu
Page 138: Z. Kwecka, BSc (Hons) Network Compu
show all

Application Layer Covert Channel Analysis and ... - Bill Buchanan

Create successful ePaper yourself

Delete template?

Save as template?