Page History

In addition to published specifications and code, and reference architecture information, GENIVI presents a family of Technical and Security-related Brief and Whitepapers. 

These documents have been published also on the official GENIVI home page.

Security Category

Certificate Pinning Brief

• This one-pager gives the reader an immediate understanding of the basics of Certificate Pinning, for avoidance of Man-in-the-middle attacks against SSL/TLS secured communications.
• GENIVI Certificate Pinning Tech Brief 20180216.pdf

Audience: Busy professionals, Software Engineers, as well as managers that need an initial awareness boost, about the risks and mitigations around encrypted communication channels.

Published with support from Irdeto.

...

Man-in-the-middle Whitepaper

• This detailed document provides in-depth analysis of Man-in-the-middle attacks agianst secured communications, and mitigations, including the concepts mentioned in the Certificate Pinning Brief.
• GENIVI Man in The Middle Attacks whitepaper Feb 20 Final.pdf

Audience: Security professionals, system architects and implementors that need a deeper understanding of pitfalls and risks in implementing SSL/TLS, categories of attacks, and which mitigations are effective against each.

Published with support from Irdeto.

Basic Technologies Category

• Waltham protocol WAMP (comingTBC)WAMP
• Waltham protocol (TBC)