SDN separates the control plane (software) from the data plane (hardware) — enabling programmable, centralized network management. Enables micro-segmentation and dynamic policy enforcement.
SDN controller is a high-value target — compromise = control entire network. SDN enables zero trust networking through fine-grained policy control. NSX (VMware), Cisco ACI are common enterprise SDN platforms.