Which of the following layers of the OSI model provides non-repudiation services?

Non-repudiation is a security service that provides proof of the integrity and origin of data, preventing an entity from denying having performed a particular action. This is typically achieved using digital signatures, which are created and verified by application-level protocols. The OSI Security Architecture (ISO/IEC 7498-2) explicitly places the non-repudiation service at the Application Layer (Layer 7). This is because the Application Layer is closest to the user and manages the specific data (e.g., an email, a transaction) whose origin needs to be proven. Protocols like Secure/Multipurpose Internet Mail Extensions (S/MIME) operate here to provide this service.

B. The data-link layer: This layer manages physical addressing and framing between adjacent nodes. It lacks the end-to-end scope and user identity context necessary for non-repudiation.
C. The presentation layer: This layer is responsible for data translation, compression, and encryption. While it handles cryptographic functions, the non-repudiation service itself is an application-level concept.
D. The physical layer: This layer deals with the transmission of raw bits over a physical medium and has no mechanisms to implement logical security services like non-repudiation.

1. ISO/IEC 7498-2:1989

"Information processing systems — Open Systems Interconnection — Basic Reference Model — Part 2: Security Architecture." In Section 7.3

"Placement of Security Services

" Table 2 ("Illustration of the placement of security services in the OSI reference model") indicates that the Non-repudiation service is applicable only to the Application Layer.

2. Stallings

W. (2017). Cryptography and Network Security: Principles and Practice (7th ed.). Pearson. In Chapter 1

Section 1.6 "Network Security Model

" the text discusses the OSI Security Architecture

stating

"The nonrepudiation service is specified in the application layer." (p. 23).

3. Pfleeger

C. P.

Pfleeger

S. L.

& Margulies

J. (2015). Security in Computing (5th ed.). Prentice Hall. Chapter 7

"Networks

" discusses security services in the context of network layers

explaining that services like non-repudiation are handled by application-specific protocols (e.g.

PGP

S/MIME)

which reside at the Application Layer.