Endpoints and devices on a network diagram
The things people and processes touch directly.
8 objects in this group, each named in plain English with the technical terms kept as searchable aliases. 8 of them carry attack notes, and every one of those ships beside the defences that reduce it. Each has an entry of its own.
Desktop computer
workstation · PC · desktop
A computer somebody sits at to do their job.
Laptop
notebook · mobile workstation
A portable computer that leaves the building.
Mobile phone
smartphone · mobile · handset
A pocket computer that reads company email.
Printer
MFP · multifunction device · copier
Prints, scans and often emails documents.
Smart device
IoT · internet of things · connected device · camera · CCTV · IP camera · security camera · sensor · door lock · smart TV
Everyday equipment with a network connection: cameras, sensors, door locks, TVs.
Plant equipment
OT · ICS · SCADA · operational technology
Machinery that runs a physical process: a pump, a valve, a production line.
Machine controller
PLC · RTU · programmable logic controller
The small computer that tells a piece of machinery what to do.
Door access reader
card reader · badge reader · access control
Reads a badge to unlock a door.
The other groups
- Network6The paths traffic travels along.
- Wireless and radio11The parts of the network that travel through the air, and how far they reach.
- Cloud and subscribed services12Things that only exist because somebody else runs the platform underneath them.
- Security and edge11The things that sit in front of something else and check what is trying to reach it.
- Servers13Machines that run something for other machines.
- Storage4Where data sits still.
- Identity6Who something claims to be, and what proves it.
- People and organisations4The humans and the entities they belong to.
- Places3Physical locations and regions.
- Process flow7Shapes for describing a procedure rather than a network.
- Threats15The adversary and the things they bring.
Draw it rather than read it
Every object above is in the editor. Press N, type a few letters of the plain name or the acronym, and it is placed and connected to whatever was selected. Nothing is uploaded, because the page is served with a Content Security Policy that forbids the browser from making any outbound request at all.
Open the diagram makerThe catalogue behind this page is published as open data under CC BY 4.0, last reviewed . Every attack note describes a mechanism and contains no procedure. Corrections are welcome.