OSI

layer 1 Physical

-transmits raw bits over cables, radio, fibre

-ex) cables, switches , wifi signals

-common attacks: wire tapping / jamming

layer 2 data

-handles MAC addresses and frames, ensures error free data transfer

-ex) ethernet , switch

-common attacks: MAC spoofing / switch flooding

layer 3 network

-routes data across network using IP addresses

-ex) IP/routers

-common attacks: IP spoofing, DDOS, Routing attack

layer 4 transport

-manages end to end connection / data delivery

-ex) TCP/IP

-common attacks: Port scanning / TCP SYN flood

layer 5 Session

-maintains sessions (open / closes connections)

-ex: API / Net Bios

-common attacks: Session hijacking

layer 6 presentation

-formats and encrypts / decypts’s data

-ex: SSL / TLS / JPEG / MP4

-common attacks: SSL Stripping

layer 7 application

-interfaces with end-users and handles application services.

-Ex: HTTP / FTP / DNS.

-Common attacks: Cross-site scripting (XSS) / SQL injection.