to allow access to network resources  defines: network virtual terminal, file transfer access, mail service, and directory service
access to device itself  application specific data (network services, dns, html, http, etc)
the layer that provides a wide variety of applications with the ability to access the services of the lower network layers  protocols: dns, dhcp, smtp/imap, http, rtsp