Predictive-CSM: Lightweight Fragment Security for 6LoWPAN IoT Networks

TL;DR

Predictive-CSM is a lightweight, adaptive security system for 6LoWPAN IoT networks that detects and mitigates fragmentation-based attacks without heavy cryptography, preserving network integrity and energy efficiency.

Contribution

It introduces a behavior-aware, lightweight defense mechanism combining node behavior tracking and chained hash integrity checks for fragment security.

Findings

Preserves network delivery under attack scenarios.

Maintains energy efficiency during security operations.

Effectively detects various fragmentation attacks.

Abstract

Fragmentation is a routine part of communication in 6LoWPAN-based IoT networks, designed to accommodate small frame sizes on constrained wireless links. However, this process introduces a critical vulnerability fragments are typically stored and processed before their legitimacy is confirmed, allowing attackers to exploit this gap with minimal effort. In this work, we explore a defense strategy that takes a more adaptive, behavior-aware approach to this problem. Our system, called Predictive-CSM, introduces a combination of two lightweight mechanisms. The first tracks how each node behaves over time, rewarding consistent and successful interactions while quickly penalizing suspicious or failing patterns. The second checks the integrity of packet fragments using a chained hash, allowing incomplete or manipulated sequences to be caught early, before they can occupy memory or waste processing time. We put this system to the test using a set of targeted attack simulations, including early fragment injection, replayed headers, and flooding with fake data. Across all scenarios, Predictive CSM preserved network delivery and maintained energy efficiency, even under pressure. Rather than relying on heavyweight cryptography or rigid filters, this approach allows constrained de vices to adapt their defenses in real time based on what they observe, not just what they're told. In that way, it offers a step forward for securing fragmented communication in real world IoT systems