Spatio-temporal heterogeneous bandwidth allocation mechanism against DDoS attack

As the spring up of Internet of Things (IoT), IoT devices are naturally advantageous to create botnets for Distributed Denial of Service (DDoS) attacks. To mitigate the effect of IoT-powered DDoS attacks, multiple bandwidth reservation approaches have been explored. Nonetheless, spreading capability and prompt defense are not fully considered in these approaches. In this paper, we propose STBA, a spatio-temporal heterogeneous bandwidth allocation mechanism, combining with existing protocols and algorithms. We leverage network capability and domain characteristics to achieve reasonable bandwidth allocation among diverse domains in STBA. Our scheme introduces centrality strategy searching for capable spreaders to ensure dependable link access of influential domains. Based on mathematical synthesis, STBA can achieve automatic shift to instantly isolate legitimate and malicious traffic. Finally, STBA realizes better performance than related schemes in comparative experiments.