As the spring up of Internet of Things (IoT), IoT devices are naturally advantageous to create botnets for Distributed Denial of Service (DDoS) attacks. To mitigate the effect of IoT-powered DDoS attacks, multiple bandwidth reservation approaches have been explored. Nonetheless, spreading capability and prompt defense are not fully considered in these approaches. In this paper, we propose STBA, a spatio-temporal heterogeneous bandwidth allocation mechanism, combining with existing protocols and algorithms. We leverage network capability and domain characteristics to achieve reasonable bandwidth allocation among diverse domains in STBA. Our scheme introduces centrality strategy searching for capable spreaders to ensure dependable link access of influential domains. Based on mathematical synthesis, STBA can achieve automatic shift to instantly isolate legitimate and malicious traffic. Finally, STBA realizes better performance than related schemes in comparative experiments.

随着物联网（IoT）的兴起，物联网设备自然有利于创建用于分布式拒绝服务（DDoS）攻击的僵尸网络。为了减轻由IoT驱动的DDoS攻击的影响，已探索了多种带宽预留方法。但是，在这些方法中并未充分考虑扩展能力和及时防御。在本文中，我们结合现有协议和算法，提出了时空异构带宽分配机制STBA。我们利用网络功能和域特征在STBA中的各个域之间实现合理的带宽分配。我们的方案引入了集中策略来搜索有能力的扩展器，以确保对影响域的可靠链接访问。基于数学综合 STBA可以实现自动转移，以立即隔离合法和恶意流量。最后，在对比实验中，STBA实现了比相关方案更好的性能。