Speaking of soft switches (e.g soft switch in data plane of software defined networking). I've been trying to find a good research paper or article that explains how an attacker can compromise a soft switch to tamper flow routing table or perform any other kind of attacks. I think this can be done by compromising a host connected to that soft switch. If this is the case, I still don't know how to be able to tamper the soft switch.
In fact, I want to understand these things conceptually for the sake of my research.