Security Team Home

Notice: This site is being updated as of March, 2021. We look forward to updating you on all of the exciting initiatives we have, so please check back soon! – Joby

As vehicles become increasingly connected and software-powered, GENIVI recognizes an emerging need for a comprehensive, end-to-end security model. The GENIVI Security Team looks at automotive cybersecurity holistically and delivers guidelines, research, and education that help build, deliver and manage more secure vehicles in the future.

Security Team Charter

The Charter of the GENIVI Security Team is to:

1. Assemble emerging automotive cybersecurity challenges/solutions/standards and inform stakeholders through published guidelines, briefs, webinars and event presentations
2. Equip stakeholders to understand and use methods and models for identifying and mitigating cybersecurity attacks on a vehicle
3. Deliver education that equips software developers and architects with an understanding of typical approaches for attacking a vehicle and with methods of mitigating those attacks with sound software development methods and testing
4. Advise GENIVI software development activities to deliver more secure solutions for the connected vehicle.

Getting Involved

Security Team Chair: Joby Jester

Marketing: michael nunnery

Team Meetings occur every other Thursday at 10:00am US Eastern Time  

Next Meeting: March 18th, 2021, 1600 CEST, 1000 EST, 0700 PDT.

Join Zoom Meeting

One-Page Slide To Promote Security Team:
 

Recent Activities & Deliverables

• MoRA Presentation for GENIVI Sec Team
  • Planning the creation of Security Evaluation Framework based on MoRA methodologies
• 2019 All Member Meeting – (see multiple security-related topics on 5/16 and 5/17 schedule)
• 2018 All Member Meeting – (see multiple security-related topics on 4/19 schedule)
• Technical Brief: Certificate Pinning (with Cloakware/Irdeto)
• White Paper: Man in the Middle Attacks and Secured Communications
• Webinar: How to Secure the Connected Vehicle Ecosystem (Presentations by Uber and Irdeto)
• An Exchange zero day vulnerability.pdf

FASTR Outputs

• “Automotive Cybersecurity Literature Review,” a report illuminating crucial research gaps
• “Automotive Industry Guidelines for Secure Over-the-Air Updates,” a document for assisting automotive manufacturers and others involved in evaluating platforms for secure updates

Past Activities & Deliverables

• Security Requirements

• Threat Model

Meeting Minutes

• Meeting Notes March 4 2021.pdf
• Meeting Notes January 21 2021.pdf

• Genivi Security Team Meeting Notes Jan 7 2021 .pdf