Distributed Denial of Service (DDoS) attack is a major threat to Internet services. We propose a scheduling scheme in a combined input-crosspoint buffered switch tomitigate the DDoS attacks in this paper. The proposed scheduling scheme allows legitimate traffic to pass with high priority and suspected attack traffic to pass however with low priority. By controls the service priority of suspected attack traffic, the method can reducethe damage DDoS attack has on the targeted end hosts.