In addition to published specifications and code, and reference architecture information, GENIVI presents a family of Technology and Security-related Brief and Whitepapers. 

These documents have been published also on the official GENIVI home page.

Security Category

Certificate Pinning Brief

• This one-pager gives an advanced reader an immediate understanding of the basics of Certificate Pinning, for avoidance of Man-in-the-middle attacks against SSL/TLS secured communications.
• GENIVI Certificate Pinning Tech Brief 20180216.pdf

Audience: Busy professionals, software engineers, as well as managers that need an quick awareness boost about risks and mitigations around encrypted communication channels.

Published with support from Irdeto.

Man-in-the-middle Whitepaper

• This detailed document provides in-depth analysis of Man-in-the-middle attacks agianst secured communications, and mitigations, including the concepts mentioned in the Certificate Pinning Brief.
• GENIVI Man in The Middle Attacks whitepaper Feb 20 Final.pdf

Audience: Security professionals, system architects and implementors that need a deeper understanding of pitfalls and risks in implementing SSL/TLS, categories of attacks, and the type of mitigation that is effective against each.

Published with support from Irdeto.

Basic Technologies Category

• WAMP (TBC)
• Waltham protocol (TBC)