Mapping Attacks and Defences to the Open Systems Interconnection (OSI) Layers

AdvancedFree5 modules · 14 lessons · ~2 min

About this course

A layer by layer map of attack classes and the controls that actually answer each one, with the detection evidence that proves a control is working rather than merely installed. You will work through physical and data link, network, transport, session, presentation and application layer attack classes in turn, correct the common mistake of applying a Layer 7 control to a Layer 3 problem, and close with worked triage, cross-layer attack chains, a detection and response playbook template, and the organisational factors underneath the technical attack classes. The course stays entirely defensive throughout: it names attack classes and controls, never exploitation instructions or working attack code.

What you'll learn

A Layer Aware Method for Defence

A Layer by Layer Method for Mapping Attacks to Controls
The Common Mistake: Applying a Layer 7 Control to a Layer 3 Problem

Lower Layer Attack Classes and Controls

Physical and Data Link Attack Classes and Their Controls
Network Layer Attack Classes and Their Controls

Transport and Session Attack Classes and Controls

Transport Layer Attack Classes and Their Controls
Session Layer Attack Classes and Their Controls

Presentation and Application Attack Classes and Controls

Presentation Layer Attack Classes and Their Controls
Application Layer Attack Classes and Their Controls, Part One: Injection and Authentication

01A Layer Aware Method for Defence2 lessons

A Layer by Layer Method for Mapping Attacks to Controls
The Common Mistake: Applying a Layer 7 Control to a Layer 3 Problem

02Lower Layer Attack Classes and Controls2 lessons

Physical and Data Link Attack Classes and Their Controls

Common questions

How much does Safeguard Academy cost?

Nothing. Every course, exam, and certificate on the catalog is free — including retakes. All you need is a free Safeguard account.

What are the prerequisites?

None. The flagship course, Safeguard Certified Practitioner, is a beginner-level course — basic familiarity with how software is built helps, but every exam question is answerable from the lessons themselves.

Application Layer Attack Classes and Their Controls, Part Two: Supply Chain and APIs

Worked Triage and Detection Evidence

Worked Triage: Ten Symptoms, Which Layer, What Evidence
Detection Evidence: What Proves a Finding at Each Layer
Cross Layer Attacks: When One Symptom Touches Multiple Layers
Building a Layer Aware Detection and Response Playbook
Layer Eight: People and Process as the Real Root Cause

Network Layer Attack Classes and Their Controls

03Transport and Session Attack Classes and Controls2 lessons

Transport Layer Attack Classes and Their Controls
Session Layer Attack Classes and Their Controls

04Presentation and Application Attack Classes and Controls3 lessons

Presentation Layer Attack Classes and Their Controls
Application Layer Attack Classes and Their Controls, Part One: Injection and Authentication
Application Layer Attack Classes and Their Controls, Part Two: Supply Chain and APIs

05Worked Triage and Detection Evidence5 lessons

Worked Triage: Ten Symptoms, Which Layer, What Evidence
Detection Evidence: What Proves a Finding at Each Layer
Cross Layer Attacks: When One Symptom Touches Multiple Layers
Building a Layer Aware Detection and Response Playbook
Layer Eight: People and Process as the Real Root Cause2 min

What happens if I fail the exam?

You can retake it after a 24-hour cooldown, as many times as you need. Retakes are free, and each attempt draws a fresh random set of questions.

How long is a certificate valid?

The Safeguard Certified Practitioner credential is valid for 24 months from issue. The expiry date is printed on the certificate and shown live on its public verification page. Renewing means passing the current exam again.