SDN Controller Cooperative Defense via Local Switch Filtering

The patent divides the network into multiple subnets, each with its own local security device performing filtering operations. This segmentation distributes the processing load from the central controller to local devices, maintaining network security while improving controller performance.

The patent introduces local security devices as intermediaries between the controller and subnets. These security devices receive alarm information from the controller and perform actual filtering operations locally, acting as mediators that relieve the controller's processing burden while maintaining security functionality.

The patent segments the defense function across multiple subnets with local security devices, so each device handles filtering for its local subnet. This maintains comprehensive defense coverage while distributing the quantity of processing work away from the controller.

Each subnet is equipped with its own security device that autonomously performs filtering operations on incoming data flows. This self-service approach allows local defense without requiring the controller to process every data flow, reducing controller load while maintaining defense coverage.

The patent segments data flow processing across multiple local security devices in different subnets. Each device enforces security policies on local data flows independently, maintaining policy enforcement integrity while increasing overall processing speed through parallel operation.

Local security devices act as intermediaries that enforce security policies locally without requiring central controller processing for each data flow. This intermediary approach maintains security policy enforcement while dramatically improving processing speed by eliminating the single-point bottleneck.