We look back at the biggest network security stories of the year, and what they mean for the future of software-defined security.

Following the revelation that a vulnerability went ignored for months, the open source OpenDaylight Project overhauls its security response measures.

More growing pains for OpenDaylight, as a massive security hole went unpatched for months, partly for lack of a security team to report it to.

The Shellshock vulnerability is bad, but at least Linux has a community ready to fix it. Not every open source project is so lucky.