Аннотация:In software-defined networks (SDN) it is possible to monitor all information flows, which allows new network protection features implementation. The implementation of such security features at the network layer of the OSI model requires formation of highly detailed security policy for this layer. The article proposes a formal method for considering the requirements for information security at the application level for each network level for build such a detailed network layer security policy.