User Tools

Site Tools


products:ict:security:an_overview_of_each_of_the_osi_model_and_the_nist_security_framework

An overview of each of the OSI Model and the NIST security framework

1. OSI Model (Open Systems Interconnection Model):

  1. The OSI model is a conceptual framework used to understand and standardize the functions of a networking or telecommunication system.
  2. It divides network communication into seven distinct layers, each responsible for specific functions:

1. Physical Layer: Deals with the physical connection between devices and the transmission of raw data over a physical medium.

   2. Data Link Layer: Handles the reliable transmission of data frames across a physical link.
   3. Network Layer: Manages the routing of data packets between different networks and addresses issues related to logical addressing and routing.
   4. Transport Layer: Ensures end-to-end communication reliability and provides mechanisms for error detection, flow control, and data segmentation.
   5. Session Layer: Manages sessions between applications on different devices, including session establishment, maintenance, and termination.
   6. Presentation Layer: Deals with data representation, encryption, compression, and formatting for application layer compatibility.
   7. Application Layer: Provides network services directly to end-users and application processes, including protocols for email, file transfer, and web browsing.

2. TCP/IP Model (Transmission Control Protocol/Internet Protocol Model):

  1. The TCP/IP model is a protocol suite used for communication between devices over the Internet.
  2. It is based on a four-layer conceptual model, which is often simplified into four layers corresponding to the OSI model:

1. Application Layer: Corresponds to the OSI application layer and includes protocols such as HTTP, SMTP, and FTP.

   2. Transport Layer: Corresponds to the OSI transport layer and includes protocols such as TCP and UDP.
   3. Internet Layer: Corresponds to the OSI network layer and includes the IP protocol for routing packets between networks.
   4. Link Layer: Corresponds to the OSI data link and physical layers and includes protocols such as Ethernet and Wi-Fi.

3. NIST Cybersecurity Framework:

  1. The NIST Cybersecurity Framework is a voluntary framework developed by the National Institute of Standards and Technology (NIST) to help organizations manage and improve their cybersecurity posture.
  2. It provides a risk-based approach for organizations to identify, assess, and manage cybersecurity risks.
  3. The framework consists of five core functions:

1. Identify: Understand and prioritize cybersecurity risks to systems, assets, data, and capabilities.

   2. Protect: Implement safeguards to ensure the security and resilience of critical assets and data.
   3. Detect: Develop and implement capabilities to detect cybersecurity events in a timely manner.
   4. Respond: Develop and implement response plans to contain and mitigate the impact of cybersecurity incidents.
   5. Recover: Develop and implement recovery plans to restore services, capabilities, and data affected by cybersecurity incidents.

These frameworks provide essential structures and concepts for understanding and managing network communication, security protocols, and cybersecurity risks in modern information technology environments.

products/ict/security/an_overview_of_each_of_the_osi_model_and_the_nist_security_framework.txt · Last modified: 2024/03/30 16:12 by wikiadmin