Application Layer Covert Channel Analysis and ... - Bill Buchanan

Z. Kwecka, BSc (Hons) Network Computing, 2006 64Internet Explorer - 'Accept' Header100%% OF RESPONSES80%60%40%20%0%200 301 302 304 400 404RESPONSE CODEForw ard ProxyFiltering ProxyResponses to Requests with ‘Accept’ Header Filtered OutResponses to modified requests are very similar, to those from unmodified requests.This suggests that ‘Accept’ header is virtually unused.Internet Explorer - 'Accept-Encoding' Header100%% OF RESPONSE80%60%40%20%0%200 206 301 302 304 404RESPONSE CODEForw ard Proxy Filtering ProxyResponses to Requests with ‘Accept-Encoding’ Header Filtered OutNumbers of error responses (‘404’) are similar for both proxies.This suggests that ‘Accept-Encoding’ header is virtually unused.Fitrefox - 'Accept-Language' Header% OF RESPONSES100%80%60%40%20%0%200 301 302 304 400 403 404RESPONSE CODEForw ard ProxyFiltering ProxyResponses to Requests with ‘Accept-Language’ Header Filtered OutNumbers of error responses (‘404’) are similar for both proxies.This suggests that ‘Accept-Language’ header is virtually unused.