Enhancing flow security in Ryu controller through set operations

Software-Define Networking (SDN) is a new generation architecture for managing and controlling the network in cost-effective and efficient way. This architecture segregates the network such that forwarding and control plan is now decoupled. The network is divided into three planes: Application plane, Control plane, and Data plane. SDN provides a programming interface with which a network administrator can modify the flow of data through flow rules. With these benefits and dynamism, it also open new security threats and challenges. In this paper, the possible threats at various SDN layers are discussed. Following which a possible solution to one of security threat proposed. The proposed solution based on set operation has been proven to be secure and practically applicable.