Secure data exchange system in software-defined networks of energy complex facilities

The analysis of threats to information security breaches was carried out and the corresponding countermeasures were provided by the levels of the SDN architecture. Tools (algorithms, software and architecture of the interaction system) to protect the control traffic of software-defined networks were developed and implemented. A method based on the introduction of an encrypted label into the packet header was proposed, allowing for recognition of malicious traffic between SDN nodes. If the label is invalid, the packet is dropped without further processing. The ability to detect packets sent to an SDN controller by an attacker was demonstrated. Thus, the effectiveness of countering DoS attacks increased by 7.8 times. Further development of the proposed approach involves creation of a software and hardware module for embedding in SDN switching equipment.