In addition to published specifications and code, and reference architecture information, GENIVI presents a family of technology and security-related technology briefs and whitepapers. 

These documents have also been published on the GENIVI home page.

Security Category

Certificate Pinning Technology Brief

• This one-pager gives an advanced reader an immediate understanding of the basics of Certificate Pinning, for avoidance of Man-in-the-middle attacks against SSL/TLS secured communications.
• GENIVI Certificate Pinning Tech Brief 20180216.pdf

Audience: Busy professionals, software engineers, as well as managers that need a quick awareness boost about risks and mitigations around encrypted communication channels.

Published with support from Irdeto.

Man-in-the-middle Whitepaper

• This detailed document provides an in-depth analysis of Man-in-the-middle attacks against secured communications, and mitigations, including the concepts mentioned in the Certificate Pinning Technology Brief.
• GENIVI Man in The Middle Attacks whitepaper Feb 20 Final.pdf

Audience: Security professionals, system architects and implementers that need a deeper understanding of pitfalls and risks in implementing SSL/TLS, categories of attacks, and the type of mitigation that is effective against each.

Published with support from Irdeto.

Basic Technologies Category

• WAMP (TBC)
• Waltham protocol (TBC)