SIEM Integration for SAP: Challenges and Best Practices
Directly integrating SAP logs into a SIEM system often creates significant operational hurdles, including high log volumes, complex maintenance requirements, and difficulties with event correlation. Organizations can overcome these challenges by using SAP Solution Manager as an intermediary to streamline data flow, improve threat detection, and simplify security operations. Executive Summary Integrating SAP systems with […]
SIEM Integration with SAP Solution Manager
Integrating SAP application logs with SIEM platforms is hard because of log complexity, volume, maintenance and missing IP data. The Cybersecurity Extension for SAP Solution Manager overcomes these obstacles by filtering, normalizing and enriching SAP security event data. Executive Summary Security Information and Event Management (SIEM) platforms collect log data from applications, hosts, routers, switches, firewalls and […]
64% of ERP Systems Have Experienced Security Breaches Between 2017-19
According to an independent survey of 430 IT decision makers, 64 percent of ERP deployments have experienced security breaches in the past 24 months. The findings are published in the report ERP Security: The Reality of Business Application Protection. Most of the breaches compromised sensitive data, including sales, HR, customer, financial and intellectual property data. […]
SAP Vulnerability Assessment vs Penetration Testing
Vulnerability assessments and penetration tests are complementary but should be deployed sequentially: vulnerability assessments come first, then penetration testing against hardened systems. Testing systems that have not been hardened gives predictable results, since the objective of penetration testing is to assess the strength of security defenses. Executive Summary Vulnerability assessment and penetration testing both serve […]
Recommended Settings for SAP Logging and Auditing
Recommended SAP logging settings keep security-relevant events while limiting disk and table space use. Maintain static filters in the Security Audit Log, set HTTP, gateway, Java and HANA logging options, and archive each log area as described. The Cybersecurity Extension for SAP Solution Manager monitors these logs to detect indicators of compromise. Executive Summary The […]
Webinar: 10KBLAZE – Secure Your SAP Systems with CVA and SolMan
SAP Code Vulnerability Analyzer (CVA) and SAP Solution Manager together help secure SAP systems against 10KBLAZE exploits. CVA performs static code analysis to detect vulnerabilities in custom code, and Solution Manager detects vulnerabilities and threats in components such as the gateway server, message server and SAProuter. This webinar from SAP and Layer Seven Security was […]
Securing Administrative Access in SAP AS Java
Administrative access in SAP NetWeaver Application Server for Java (AS Java) is secured by granting UME administrative roles and actions, such as Manage_All, Manage_Roles and Manage_Users, only to users who need them (least privilege), and by monitoring privileged users and new privilege grants with the Cybersecurity Extension for SAP Solution Manager. Executive Summary Misuse of […]
Cyber Espionage Warning: 30% Growth in Targeted Attacks
The number of organizations targeted by advanced hacking groups rose by almost one third between 2015 and 2018, according to Symantec’s Internet Security Threat Report. Groups such as Chafer and Dragonfly increasingly use publicly available tools rather than malware, so detection speed and incident response matter. Executive Summary The annual Internet Security Threat Report shows advanced hacking […]
Layer Seven Security Recognized as an SAP Cybersecurity Leader
Layer Seven Security was named the leading SAP cybersecurity provider in the 2018 Top 10 SAP Solution Providers study. The company more than doubled its customer base and grew revenue 350% in 2018, and announced a three-year roadmap covering security reporting, Java monitoring and database monitoring. Executive Summary The 2018 Top 10 SAP Solution Providers study recognizes […]
Webinar Recording: Security Analytics with SAP Web Intelligence
This webinar replay shows how SAP Web Intelligence, running on the BusinessObjects platform, turns SAP Solution Manager data into interactive security reports. It covers vulnerabilities, missing security notes and open alerts, with charts, tables, comments for tracking remediation, and remote access. Executive Summary Web Intelligence connects directly to data sources in SAP Solution Manager and […]