SDN offers many advantages related to automation, orchestration, and further enabling an intelligent enterprise. SDN can offer several capabilities to enable automated cyber defense, especially as organizations look to more effectively respond and mitigate cyber attacks. However, more advanced techniques including the application of machine learning can be used to shift an organizations focus from automated response to proactively defending the network. This discussion will focus on the use of SDN to not only enable security orchestration and automated cyber response but to also proactive alter the attack surface to deceive potential adversaries.