Network paths on a network diagram
The paths traffic travels along.
7 objects in this group, each named in plain English with the technical terms kept as searchable aliases. 7 of them carry attack notes, and every one of those ships beside the defences that reduce it. Each has an entry of its own.
The internet
WAN · public network
Everything outside your organisation's control.
Router
gateway · layer 3
Sends information from one network to another, the way a junction sends cars down different roads.
Switch
layer 2 · LAN switch
Connects the devices inside one building or floor, passing each message only to the machine it is addressed to.
Remote access gateway
VPN · VPN concentrator · remote access · Citrix · NetScaler · Ivanti · Pulse Secure · Fortinet · FortiGate · Palo Alto · GlobalProtect · SonicWall · AnyConnect
The door staff use to reach the internal network from outside.
Address range
CIDR · subnet · IP range
A group of numbered addresses on a network, written as a single line such as 192.0.2.0/24 rather than listed one by one.
Internet network operator
ASN · autonomous system · AS number · BGP network · peering
One organisation's own network on the internet, identified by a number so every other network knows whose it is.
Internet network operator: what it is and how it is attacked →
Domain name
DNS name · registrar · domain registration · registrant · domain record
The name the organisation owns, and the account at the registrar that controls it.
The other groups
- Wireless and radio11The parts of the network that travel through the air, and how far they reach.
- Cloud and subscribed services14Things that only exist because somebody else runs the platform underneath them.
- Security and edge14The things that sit in front of something else and check what is trying to reach it.
- Servers14Machines that run something for other machines.
- Storage4Where data sits still.
- Endpoints and devices9The things people and processes touch directly.
- Identity7Who something claims to be, and what proves it.
- People and organisations5The humans and the entities they belong to.
- Places4Physical locations and regions.
- Process flow7Shapes for describing a procedure rather than a network.
- Threats18The adversary and the things they bring.
Draw it rather than read it
Every object above is in the editor. Press N, type a few letters of the plain name or the acronym, and it is placed and connected to whatever was selected. Nothing is uploaded, because the page is served with a Content Security Policy that forbids the browser from making any outbound request at all.
Open the diagram makerThe catalogue behind this page is published as open data under CC BY 4.0, last reviewed . Every attack note describes a mechanism and contains no procedure. Corrections are welcome.