Application Layer Covert Channel Analysis and ... - Bill Buchanan

Z. Kwecka, BSc (Hons) Network Computing, 2006 90try{retdict.Add(Lines[Cnt].Substring(0, Ret), Lines[Cnt].Substring(Ret + 1).Trim());}catch {}}}return retdict;}///Parses a specified HTTP query into its header fields.///The HTTP query string to parse.///A StringDictionary object containing all the header fields with theirdata.///The specified query is null.private StringDictionary ParseQuerySignature(string Query){int order = 0;StringDictionary retdict = new StringDictionary();string [] Lines = Query.Replace("\r\n", "\n").Split('\n');int Cnt, Ret;//Extract requested URLstring comparer;//parsing of headers followsfor(Cnt = 1; Cnt < Lines.Length; Cnt++){Ret = Lines[Cnt].IndexOf(":");if (Ret > 0 && Ret < Lines[Cnt].Length - 1){try{retdict.Add(Lines[Cnt].Substring(0, Ret), order.ToString());//comparer =System.Globalization.CultureInfo.CurrentCulture.TextInfo.ToTitleCase(Lines[Cnt].Substring(0, Ret));comparer = Lines[Cnt].Substring(0, Ret).ToLower();comparer =System.Globalization.CultureInfo.CurrentCulture.TextInfo.ToTitleCase(comparer);if(Lines[Cnt].IndexOf(comparer)