关键词: 软件定义网络（SDN）, 安全设备, 个性化安全服务, 最短路径

Abstract: Software defined networking is a new kind of network architecture. It is an important way that realizes automated deployment and flexible management for network. SDN separates data plane and control plane of network, so as to realize the flexible control of the network traffic. Therefore, this paper proposes a security device routing model based on SDN network. The model combines the improved shortest routing algorithm of inline and passive security devices, and the shortest-path routing algorithm using neural network, gets a highly efficient routing policy of security devices. Coupled with SDN network architecture, it builds a scheduling system of network security service. In the complex network environment with security devices mixed deploy, it can provide users with personalized security service, at the same time, it calculates the shortest security path with lower network cost, improves the efficiency of network routing and resource utilization.

Key words: Software Defined Networking（SDN）, security device, personalized security service, the shortest path