A software defined network capable of detecting DDoS attacks and the switches included therein are disclosed. The disclosed software defined network comprising: a controller located in a control plane of the software defined network; And a plurality of switches located on a data plane of the software defined network, wherein each of the plurality of switches collects packets received on a corresponding external network, and detects a DDoS attack using the collected packets do.
展开▼