Method for detecting network anomaly in distributed software defined networking environment, apparatus therefor, and computer program therefor

An apparatus for detecting network anomaly in an SDN environment, the apparatus comprising:

• an application unit configured to receive an operation signal about whether to perform any function from a user;
• a communication unit configured to collect a control message from a distributed SDN controller;
• and
• a controller configured to generate network characteristic information using the control message and provide a network analysis result corresponding to the operation signal using the network characteristic information,
• wherein the application unit provides the network analysis result to the user, and
• wherein the network characteristic information comprises statistic information or event information included in the control message, new calculation information calculated using the statistic information or the event information, and network stateful information.

A computer program stored in a medium to detect network anomaly in an SDN environment, the computer program comprising:

• receiving an operation signal about whether to perform any function from a user;
• collecting a control message from a distributed SDN controller;
• generating network characteristic information using the control message;
• and
• providing a network analysis result corresponding to the operation signal using the network characteristic information,
• wherein the network characteristic information comprises statistic information or event information included in the control message, new calculation information calculated using the statistic information or the event information, and network stateful information.