SAP Discloses Security Gaps in Cloud Solutions (May 2020)
In May 2020, SAP disclosed security lapses across several of its cloud-based products, including SAP Cloud Platform, SAP Analytics Cloud, SuccessFactors, and Concur. The company identified these issues during an internal security review and initiated remediation efforts for approximately 9% of its 440,000 customers. Executive Summary The May 2020 announcement from SAP revealed that specific […]
Layer Seven Security Recognized as a Top 25 Cyber Security Company for 2020
Layer Seven Security has been named one of the Top 25 Cyber Security Companies for 2020 by the editorial board of CIO Applications. This recognition highlights the firm’s innovative Cybersecurity Extension for SAP Solution Manager, a solution designed to provide automated vulnerability management, threat detection, and incident response for business-critical SAP systems. Why was Layer […]
How to Secure the SAProuter from Remote Attacks
The SAProuter is a critical reverse proxy for remote SAP access, but its internet-facing position makes it a high-value target for remote exploits. Proper configuration—including restricted route permission tables, enforced SNC, and regular patching—is essential to prevent attackers from using the SAProuter to pivot into and compromise internal SAP servers. Executive Summary As remote work […]
Dramatic Growth in Cyber Attacks and Enterprise Risk
Cyber attacks increased by six times their usual levels between February and March 2020, driven by the COVID-19 pandemic and a sudden shift to remote work. Hacking and phishing attempts rose by 37% in one month, while the exposure of Remote Desktop Protocol (RDP) and VPN services grew significantly, creating new vulnerabilities for enterprises. The […]
SIEM Integration for SAP: Challenges and Solutions
Integrating SAP logs directly into Security Information and Event Management (SIEM) systems is often a complex and costly process. By leveraging SAP Solution Manager to filter, structure, and enrich security event data, organizations can achieve seamless integration while avoiding the high maintenance and licensing costs associated with direct log ingestion. Watch the Webinar: You can view […]
SIEM Integration for SAP: Challenges and Best Practices
Directly integrating SAP logs into a SIEM system often creates significant operational hurdles, including high log volumes, complex maintenance requirements, and difficulties with event correlation. Organizations can overcome these challenges by using SAP Solution Manager as an intermediary to streamline data flow, improve threat detection, and simplify security operations. Executive Summary Integrating SAP systems with […]
SIEM Integration with SAP Solution Manager
Security Information and Event Management (SIEM) platforms combine the ability to collect log data from applications, hosts, routers, switches, firewalls and other endpoints with the ability to analyze events in real time. They support threat detection, event correlation and incident response with alerting and reporting capabilities. SIEM platforms require complete coverage for maximum yield. In […]
64% of ERP Systems Have Experienced Security Breaches Between 2017-19
According to the findings of a recent independent survey of 430 IT decision makers, 64 percent of ERP deployments have experienced security breaches in the past 24 months. The findings are published in the report ERP Security: The Reality of Business Application Protection. In the words of the IDC, “ERP applications such as SAP can […]
SAP Vulnerability Assessment vs Penetration Testing
Vulnerability assessment and penetration testing both serve important functions for protecting business applications against security threats. The approaches are complementary but should be deployed sequentially. Penetration testing against systems and applications that have not been hardened based on the results of vulnerability assessments is inadvisable since the results are predictable. The objective of penetration testing […]
Recommended Settings for SAP Logging and Auditing
The Cybersecurity Extension for SAP Solution Manager monitors SAP event logs to automatically detect and alert for indicators of compromise. The monitoring interval can be customized for each security metric based on risk and sizing. An interval of 60 seconds, for example, can support real-time threat detection. However, real-time detection is only useful when supported […]