Overview
The OSI (Open Systems Interconnection) model is a conceptual framework that divides networking into seven layers, each with a specific job. It is the single most useful mental map in networking: it lets you reason about where a function or a problem lives. This lesson introduces all seven layers.
Learning objectives
- Name the seven OSI layers in order.
- State the responsibility of each layer.
- Understand the model as a conceptual tool, not literal software.
Core concept
From top (closest to the user) to bottom (closest to the wire):
| # | Layer | Responsibility | Example |
|---|---|---|---|
| 7 | Application | Interface to user-facing services | HTTP, DNS |
| 6 | Presentation | Data format, encryption, encoding | TLS, character encoding |
| 5 | Session | Establishing/managing sessions | session setup/teardown |
| 4 | Transport | End-to-end delivery, ports | TCP, UDP |
| 3 | Network | Logical addressing, routing | IP |
| 2 | Data Link | Local delivery on a link, MAC | Ethernet |
| 1 | Physical | Transmitting raw bits | cables, radio |
A common mnemonic (top to bottom) is "All People Seem To Need Data Processing."
How it works
Each layer provides services to the layer above and relies on the layer below. When you send data, it moves down the layers on your device (each adding its own handling), across the physical medium, and up the layers on the receiving device. This separation means each layer can do its job without needing to know the details of the others — a router can route (Layer 3) without understanding the web page (Layer 7) inside.
Cybersecurity relevance
The OSI model is a shared language for security: attacks and defenses are described by layer (a "Layer 7 DDoS" targets the application; "Layer 2 attacks" target Ethernet). Knowing the layers helps you place a threat or control precisely and reason about what a given tool can and cannot see.
Common mistakes
- Trying to memorize layers without understanding their jobs — the responsibility matters more than the number.
- Treating OSI as literal software — it is a conceptual model; real stacks (like TCP/IP) do not map perfectly onto all seven layers.
Key takeaways
- The OSI model splits networking into seven layers, from Physical (1) up to Application (7).
- Each layer serves the one above and uses the one below, isolating concerns.
- It is a conceptual map and a shared vocabulary for describing network functions, attacks, and defenses.
Check your understanding
- List the seven OSI layers in order and one responsibility of each.
- Why is the OSI model useful even though real networks use the TCP/IP stack?