✕
Image
Currently viewing ATT&CK v19.2 which was live between April 28, 2026 and October 12, 2026. Learn more about the versioning system or see the live site.
ATT&CKcon 7.0 registration is open! Join us October 27-28, 2026 in McLean, VA or virtually. Register in person or register virtually. See the FAQ for hotel and venue details.

Switch

A switch is a network device that connects endpoints (e.g., workstations, servers, HMIs, PLCs, etc.) so that they can communicate and share data and resources. Switches may operate at either Layer 2 or Layer 3 of the OSI Model and intelligently forward packets across the network based on the specified address (Media Access Control (MAC) address for Layer 2 and Internet Protocol (IP) address for Layer 3). Switches are typically used to define network segments and connect the devices within a particular level of the Purdue Model.

ID: A0015
ⓘ
Platforms: Embedded, Network
Sectors: General
Version: 1.1
Created: 24 September 2025
Last Modified: 12 May 2026

Related Assets

Name Sectors Description
Core Switch General

A core switch is a device that provides high-speed and reliable connectivity and can be connected with other core switches to make up the backbone of large enterprise/ICS networks.

Access Switch General

An access switch is a device that allows end users via endpoints (e.g., workstations, servers, etc.) to connect to the network and share data and resources.

Layer 2 Switch General

A Layer 2 switch is a device that forwards data packets on the network based on the specified destination MAC address.

Layer 3 Switch General

A Layer 3 switch is a device that forwards data packets on the network based on the specified source and destination IP addresses.

Distribution Switch General

A distribution switch is a device that connects access switches with core switches and is responsible for controlling traffic between networks.

Techniques