1. Next Generation Network Security using Software-Defined Networking

2. State of Network Security
Fixed-function hardware at network perimeter
Intranet
Internet

3. Traditional Network Security is Broken!
Attacks growing in scale, diversity, and sophistication!
Internet
Intranet
Current trajectory is impractical
 Cost, management complexity, user pain

4. Our vision: “Software-Defined” network security
Flexible , in-depth, progammable defenses!
Network Orchestration Layer
Admin
High level security policy intents
Programmable
centralized
management
Flexible “software”
network
appliances
Fixed-function hardware at network perimeter
Intranet
Internet

5. Key Technical Challenges
Management complexity
Scalability
Resource management
Resilient to “smart” attackers

6. Two concrete use cases
Precise Security Instrumentation for Enterprise Networks
Flexible and Elastic DDoS Defense as a Network Service