difend.net

The OSI model for business owners: where attacks happen

IT people talk about "layer 7" or "layer 2" attacks. The OSI model is simply a way of splitting a network into seven layers, from the cables in the wall up to the apps on your screen. Attacks happen at every layer, which is why one security product is never enough.

The seven OSI layers, common attacks and defences LayerWhat lives hereCommon attacksHow we defend7ApplicationWeb apps, emailPhishing, SQL injectionEmail filtering, pen testing6PresentationEncryption (TLS)Weak or stripped TLSHTTPS, Cloudflare5SessionLogins, sessionsSession hijackingMFA, short sessions4TransportTCP, UDP portsSYN and UDP floodsFirewall, DDoS protection3NetworkIP routingIP spoofing, scanningRules, segmentation2Data linkEthernet, Wi-FiARP spoofing, rogue Wi-FiVLANs, WPA3, port security1PhysicalCables, devicesTheft, tamperingLocked racks, encryption
The seven OSI layers, common attacks and defences

What this means in practice

  • The top layers (5 to 7) are where most small-business attacks start: phishing emails, stolen passwords and flaws in web apps. Multi-factor authentication, email filtering and regular testing matter most here.
  • The middle layers (3 and 4) are your firewall's job: blocking scans and floods, and keeping parts of the network separate.
  • The bottom layers (1 and 2) are about the office itself: guest Wi-Fi kept apart from business systems, locked network cabinets and encrypted laptops in case one is stolen.

Good security covers every layer without making work harder. Book an assessment and we'll show you where your gaps are.

Want help with this?

Book a 30-minute call and we'll look at your setup.

Book a consultation