a (2010) propose a short-term statistics detection method based on entropy computation. "Short-term" here refers to calculating entropy in small size windows. The study proposes a window size of 50 packets for gathering statistics. In this method, different window sizes were tested for optimal entropy measurement and a size of 50 was the lowest size that effectively detected attacks. Instead of a threshold, the authors used a one-sided test of significance to confirm whether an attack was in progress or not. In the DDoS detection case, the rate of attack traffic was increased by increments while the normal traffic rate was kept constant. The method proved to be effective the most when the attack traffic was 75% or higher than the normal traffic. Downloaded: 4/15/2022 9:44:49 AM Nova Southeastern University IP Address: 137.52.76.29 Analysis of Issues in SDN Security and Solutions Utilizing SDN Capabilities When there comes an incoming connection, the controller will install a flow in the switch SO that the rest of the incoming packets will be directed to the destination without further processing. Hence, any time a packet is seen in the controller, it is new. Destination host is within network of the controller while new packets come. This is induced on the basis of the fact that one of the hosts or a subnet of hosts in the network is being attacked. The network consists of the switches and hosts that are connected to it. Knowing that the packet is new and that the destination is in the network, the level of randomness can be quantified by calculating the entropy based on a window size. In this case, maximum entropy occurs when each packet is send by exactly one source. On the other side, minimum entropy occurs when all the packets in a window are send by single source. For example, if the window has 64 elements and all elements appear only once, then as per available equation the entropy will be 1.80. If one element appears 10 times, the entropy will be 1.64. This property of the entropy will be used for calculat