انجمن رمز ایران Biannual Journal Monadi for Cyberspace Security (AFTA) 2476-3047 12 1 2023 9 1 On the Use of Fuzzy-WLC modeling technique for Evaluating Security of Cryptographic Module 1 11 FA The development of information and communication technology has led to the increasing production of new products in this field. One of the critical products protect informational assets at various levels of security in this field is cryptographic module. The security of cryptographic modules for providing a practical degree of protection against attacks should be examined totally. Therefore, the security evaluation of a cryptographic module requires a strong awareness of the potential weaknesses that would become security flaws, and careful consideration of security during all aspects of the evaluation process. In this paper, we present a comprehensive picture of the security evaluation criteria of the cryptographic module in accordance with existing international standards (e.g. FIPS 140-2 ,3 and ISO 15408, PKCS#11) and we propose the model based on fuzzy-weighted linear combination for measuring the compliance of these criteria correctly. Also, the structure of any kind of evaluation requires considerable cost and spends amount time, which on the one hand depends on the policies and requirements of the country and on the other hand depends on the facilities and experts. Finally, introducing and providing solutions that help solve the challenges, so we present some challenges about security evaluation in our country actually confirms the importance of study and research in this area.

انجمن رمز ایران Biannual Journal Monadi for Cyberspace Security (AFTA) 2476-3047 12 1 2023 9 1 Integrity checking of outsourced computations 12 29 FA Somayeh Dolatnezhad Samarin Sharif University of Technology Morteza Amini Sharif University of Technology In recent years, one of the main topics of interest in the security of outsource computations is checking the integrity of the results received from the outsourced computations. Outsourced computations can be run on data received from single or multiple data sources. There are a few methods proposed for system models with distributed data sources. The main solutions provided in this area to verify the correctness of the execution of any or some special functions such as linear, polynomial or aggregate functions are categorised to: (1) verifiable computations, (2) homomorphic authenticators, and (3) methods proposed for specific applications such as outsourced databases, wireless sensor networks and data stream management systems. In this paper, these methods, especially the methods proposed for outsourced computations in data stream management systems, have been reviewed and compared.

انجمن رمز ایران Biannual Journal Monadi for Cyberspace Security (AFTA) 2476-3047 12 1 2023 9 1 Privacy-preserving data and function in cloud environments using homomorphic encryption 30 48 FA Amin Hosseingholizadeh Department of Mathematics and Computer Science, Amirkabir University of Technology, Tehran, Iran. Farhad Rahmati Department of Mathematics and Computer Science, Amirkabir University of Technology, Tehran, Iran. Mohammad Ali Department of Mathematics and Computer Science, Amirkabir University of Technology, Tehran, Iran. With the emergence of new phenomena in the telecommunications and information technology fields, such as cloud computing and smart networks, we are witnessing new challenges in these areas. One of the most significant challenges is the privacy of outsourced data. Due to the limited processing power of new intelligent devices such as tablets and mobile phones, outsourcing computations to these platforms has gained more attention from users. In addition to data privacy, the security of algorithms used in online software is also of great importance. Therefore, software providers may be concerned about the disclosure of their algorithms after outsourcing them to cloud environments. Existing homomorphic encryption systems can provide privacy for data that needs to be processed online. However, the concurrent privacy of algorithms in these systems has not been addressed. To address this, we introduce a simultaneous homomorphic encryption of data and function called SHDF. This system can homomorphically encrypt all algorithms used in the software and the data to be processed on them, enabling necessary computations to be performed on an insecure server. Furthermore, we show that the proposed system is provably secure. Our implementation results indicate that it is usable in cloud environments with the desired efficiency.

انجمن رمز ایران Biannual Journal Monadi for Cyberspace Security (AFTA) 2476-3047 12 1 2023 9 1 Review of the security models with emphasis on leakage-resilient key exchange protocols 65 49 FA Nasser Zarbi Department of Science, Shahid Rajaee Teacher Training University, Tehran, Iran Ali Zaeembashi Department of Science, Shahid Rajaee Teacher Training University, Tehran, Iran Nasour Bagheri Electrical Engineering Department, Shahid Rajaee Teacher Training University, Tehran, Iran Leakage-resilient cryptography aims to design key exchange protocols to withstand leakage attacks. These protocols are examined using a leakage-resilient security model to determine whether they possess the claimed security properties. The security analysis focuses on how the leakage-resilient security model has evolved to meet increasing security requirements and cover a broader range of attacks. By studying and analyzing the presented security properties of these models, potential vulnerabilities in protocol design can be effectively addressed. This article delves into various leakage-resilient security models based on two models, CK and eCK, and provides examples of secure key exchange protocols defined within these models. Additionally, it explores the relationship between adversaries' capabilities in these models and different attack schemes in the real world. By offering insights into various leakage-resilient security models, leakage attacks, and the development of secure protocols, it contributes to advancing knowledge in this field.

انجمن رمز ایران Biannual Journal Monadi for Cyberspace Security (AFTA) 2476-3047 12 1 2023 9 1 A Comprehensive Exploration of Deep Learning Approaches in Differential Cryptanalysis of Lightweight Block Ciphers 66 91 FA Iman Mirzaali Mazandarani Department of TeleCommunications, Shahid Rajaee Teacher Training University, Tehran, IranShahid Rajaee Teacher Training University Nasour Bagheri Department of TeleCommunications, Shahid Rajaee Teacher Training University, Tehran, Iran Sadegh Sadeghi Department of Mathematics, Institute for Advanced Studies in Basic Sciences, Zanjan, Iran With the increasing and widespread application of deep learning and neural networks across various scientific domains and the notable successes achieved, deep neural networks were employed for differential cryptanalysis in 2019. This marked the initiation of growing interest in this research domain. While most existing works primarily focus on enhancing and deploying neural distinguishers, limited studies have delved into the intrinsic principles and learned characteristics of these neural distinguishers. In this study, our focus will be on analyzing block ciphers such as Speck, Simon, and Simeck using deep learning. We will explore and compare the factors and components that contribute to better performance. Additionally, by detailing attacks and comparing results, we aim to address the question of whether neural networks and deep learning can effectively serve as tools for block cipher cryptanalysis or not.

انجمن رمز ایران Biannual Journal Monadi for Cyberspace Security (AFTA) 2476-3047 12 1 2023 9 1 An overview of secure authentication methods using ECG biometrics with deep learning algorithms 92 111 FA Narges Mokhtari Department of Telecommunication Engineering, Faculty of Electrical Engineering, Shahid Rajaee Teacher Training University (SRTTU), Tehran, Iran Amirhossein Safari Department of Computer Science and Information Technology, Institute for Advanced Studies in Basic Sciences (IASBS), Zanjan, Iran Sadegh Sadeghi Department of Mathematics, Institute for Advanced Studies in Basic Sciences, Zanjan, Iran Biometric systems are an important technique for user identification in today's world, which have been welcomed due to their non-invasive nature and high resistance to forgery and fraud. Physiological and behavioral biomarkers are two main types of biometric identifiers. Behavioral identifiers, such as voice recognition, are based on human or even animal actions. Physiological biometrics, such as fingerprints and facial recognition, which have been used in our daily lives in the past years, are based on the physical characteristics of the human body. One of the various biometrics that have been investigated in studies in this field is the heart signal, which has been well used in authentication and identification systems due to its simple acquisition process compared to biomarkers such as the brain signal. In addition, there are valid databases on heart signal data, which the researchers of this issue refer to evaluate their systems. In this study, the analysis, analysis, and comparison of different authentication methods using heart signal biometrics have been studied. Also, in the following, the advantages and disadvantages of deep learning methods and models proposed in this field have been examined. In the final part, firstly, the implementation of the method presented in Fuster and Lopez's research is discussed, and then, to evaluate, we present the tests designed using the network created in this study, and after that, concluding based on the results.

انجمن رمز ایران Biannual Journal Monadi for Cyberspace Security (AFTA) 2476-3047 12 1 2023 9 1 Methods of analyzing and proving the security of security protocols 112 136 FA MOhammad Dakhilalian Isfahan University of Technology Masomeh Safkhani Shahid Rajaee Teacher Training University Fatemeh Pirmoradian Isfahan University of Technology Providing all remote services requires mutual authentication of participating parties. The framework by which this authentication is done is called authentication protocols. In other words, cryptographic or cryptographic protocol is a distributed cryptographic algorithm that establishes interactions between at least two or more hosts with a specific purpose. In fact, these protocols have provided secure and insecure channels for communication between the parties participating in the protocol. Usually, secure channels are used for registration and insecure channels for mutual authentication. After registering on the server and verifying its identity by the server, the user can benefit from the services provided by the server. Many authentication protocols have been proposed in fields such as e-medical care, Internet of Things, cloud computing, etc. The privacy and anonymity of users in these plans is the biggest challenge in implementing a platform to benefit from remote services. Due to the fact that authentication of users takes place on the insecure platform of the Internet, it can be vulnerable to all existing Internet attacks. In general, there are two methods to analyze and prove the security of authentication protocols. Formal method and In-formal method. The In-formal method, which is based on intuitive arguments, analyst's creativity and mathematical concepts, tries to find errors and prove security. While the formal method, which is done both manually and automatically, has used a variety of mathematical logics and automatic security analysis tools. Manual method using mathematical models such as Real Or Random and mathematical logics such as BAN logic, GNY logic, etc., and automatic method using AVISPA, Scyther, ProVerif, TAMARIN, etc. tools. In fact, the methods of proving and analyzing the security of security protocols are divided into two general categories based on proof of theorem and model verification, and in this article, the details of each of these methods of proving security are explained. It should be noted that most of the security protocol verification tools are based on model verification. The methods based on model checking and then the methods based on proving the theorem are described.