Page History

In addition to published specifications and code, and reference architecture information, GENIVI presents a family of Technology technology and Securitysecurity-related Brief technology briefs and Whitepaperswhitepapers. 

These documents have also been published also on the official GENIVI home page.

Security Category

Certificate Pinning Technology Brief

• This one-pager gives an advanced reader an immediate understanding of the basics of Certificate Pinning, for avoidance of Man-in-the-middle attacks against SSL/TLS secured communications.
• GENIVI Certificate Pinning Tech Brief 20180216.pdf

Audience: Busy professionals, software engineers, as well as managers that need an a quick awareness boost about risks and mitigations around encrypted communication channels.

...

• This detailed document provides an in-depth analysis of Man-in-the-middle attacks agianst against secured communications, and mitigations, including the concepts mentioned in the Certificate Pinning Technology Brief.
• GENIVI Man in The Middle Attacks whitepaper Feb 20 Final.pdf

Audience: Security professionals, system architects and implementors implementers that need a deeper understanding of pitfalls and risks in implementing SSL/TLS, categories of attacks, and the type of mitigation that is effective against each.

...