نشریه منادی امنیت فضای تولید و تبادل اطلاعات (افتا)
سال دوازدهم شماره 1 (پیاپی 23، بهار و تابستان 1402)

Development of information and communication technology has led to the increasing production of new products. One of the critical products that protect informational assets at various levels of security is the cryptographic module. Evaluating the security of cryptographic modules is critical for providing a reasonable degree of protection against attacks. Therefore, the security evaluation of a cryptographic module requires a strong awareness of the potential weaknesses that would become security flaws and careful consideration of security during all aspects of the evaluation process. In this paper, we present a comprehensive picture of the security evaluation criteria of the cryptographic module under existing international standards (e.g., FIPS 140-2 ,3 and ISO 15408, PKCS#11). In order to measure the compliance of these criteria correctly, we propose the model based on fuzzy-weighted linear combination. Also, the structure of any kind of evaluation requires considerable cost and time, which on the one hand, depends on the policies and requirements of the country, on the other hand depends on the facilities and experts. Finally, introducing and providing solutions that help solve the challenges, so we present some challenges about security evaluation in our country confirms the importance of study and research in this area.

In recent years, one of the main topics of interest in the security of outsource computations is checking the integrity of the results received from the outsourced computations. Outsourced computations can be run on data received from single or multiple data sources. There are a few methods proposed for system models with distributed data sources. The main solutions provided in this area to verify the correctness of the execution of any or some special functions such as linear, polynomial or aggregate functions are categorised to: (1) verifiable computations, (2) homomorphic authenticators, and (3) methods proposed for specific applications such as outsourced databases, wireless sensor networks and data stream management systems. In this paper, these methods, especially the methods proposed for outsourced computations in data stream management systems, have been reviewed and compared.