CASP+ Definitions: Software-defined Networking
Software-defined networking (SDN) is an approach to network management that abstracts the network’s underlying infrastructure and separates the network control plane from the data plane. In traditional networks, each network device is configured separately, and each device must be manually configured to handle traffic flows. SDN separates the network control plane from the data plane, which means that network administrators can define network behavior through software, rather than configuring each network device individually.
In terms of cybersecurity, SDN can provide several benefits. It enables network administrators to define and enforce security policies more easily and quickly, without having to configure individual network devices. SDN can also enable network segmentation, which can help to prevent lateral movement of attackers within the network. Additionally, SDN can facilitate the integration of security services, such as firewalls and intrusion detection and prevention systems, into the network, making it easier to manage and monitor these services.
