Not sure what you mean, Stelellico

Phillip mentioned a few in his responses -- OpenFlow and the possibility of DDoS on the controller. It may be that this is so new that there is no real production app to check for vulnerabilities. I will ask Phillip for his thoughts.