Abstract: Controller is the core of Software Defined Network, and its security is crucial for SDN maintenance. Based on open source SDN controller architectures, we analyze its security issues of network information protection, application management and module processing under different control patterns, and further propose a secure SDN controller architecture, which integrates shared network information base, collision detection, intrusion tolerance module etc. This design can solve single controller invalidation and logic inconsistency and improve the robustness of SDN.

Key words: SDN, controller security, security analysis, architecture design