Thursday, January 23, 2020

OSI Layers






Application Layer:  This layer interacts with user and prepares data for next layer. Application layer includes the protocols that supports applications. This layer formats takes the data and instructions from applications, format them and passes down to next layer.
FTP. HTTP, SMTP, DNS (SSL, TLS)

Presentation Layer: Presentation layer takes the data from application layer and puts it in a format that all computer sytems on OSI Model can understand. This layer concerns about syntax and format of data. Presentation layer also handles the compression, encoding and encryption issues.
MPEG, JPEG, SSL

Session Layer: Session layer is responsible of maintaining the connection between two applications.
Session layer protocols control application to application communication.
NFS, SQL, RPC(Remote Procedure Call), NetBIOS

Transport Layer: Transport layer protocols handle computer to computer communication. This layer is responsible of reliability. Handshaking process happens at transport layer. Source and destination ports are specified at this layer. Transport layer takes data and segment it. Transfers the segment from source to destination.
TCP, UDP (For CISSP SSL)

Network Layer: Main responsibility of network layer is to insert information into packet's headers.
Segments become packets by adding source and destination IP addresses.
IP, ICMP

Data Link Layer: Data link layer is responsible transferring data between devices. The packets become frames which are created for specific network, for example ethernet. Frames have the physical addresses of two nodes transferring the data.
(LLC-LOgical ink control and MAC are sublayers of datalink layer) ARP, ethernet

Physical Layer: Physica layer is responsible of  converting bits into voltage for transmission.
network adapter, repeater, hubs

TLS/SSL Vulnerabilities

POODLE:  The SSL 3.0 vulnerability is in the Cipher Block Chaining (CBC) mode. Block ciphers require blocks of fixed length. If data in th...