SAP Vulnerability Assessment vs Penetration Testing
Vulnerability assessments and penetration tests are complementary but should be deployed sequentially: vulnerability assessments come first, then penetration testing against hardened systems. Testing systems that have not been hardened gives predictable results, since the objective of penetration testing is to assess the strength of security defenses. Executive Summary Vulnerability assessment and penetration testing both serve […]
Webinar: 10KBLAZE – Secure Your SAP Systems with CVA and SolMan
SAP Code Vulnerability Analyzer (CVA) and SAP Solution Manager together help secure SAP systems against 10KBLAZE exploits. CVA performs static code analysis to detect vulnerabilities in custom code, and Solution Manager detects vulnerabilities and threats in components such as the gateway server, message server and SAProuter. This webinar from SAP and Layer Seven Security was […]
Securing Administrative Access in SAP AS Java
Administrative access in SAP NetWeaver Application Server for Java (AS Java) is secured by granting UME administrative roles and actions, such as Manage_All, Manage_Roles and Manage_Users, only to users who need them (least privilege), and by monitoring privileged users and new privilege grants with the Cybersecurity Extension for SAP Solution Manager. Executive Summary Misuse of […]
Secure, Patch & Respond: Security Analytics with SAP Web Intelligence
SAP Web Intelligence lets users visualize and manage security risks in SAP systems through interactive web reports. Powered by the BusinessObjects platform, it connects directly to SAP Solution Manager data to show vulnerabilities, missing security notes and open alerts using dynamic charts, graphs and detailed tables. Executive Summary SAP Web Intelligence reports summarize SAP security […]
How to Comply with the DHS Recommendations for Securing SAP Systems from Cyber Attacks
SAP Solution Manager helps you comply with the DHS recommendations for securing SAP systems by covering all seven: vulnerability scanning, interface analysis, privileged-user review, indicator-of-compromise monitoring, user-behaviour monitoring, threat intelligence updates and baseline compliance monitoring, using Configuration Validation, System Recommendations, ICMon and the Monitoring and Alerting Infrastructure. Executive Summary In response to a rise in […]
Discover Vulnerable System Connections with Interface Monitoring
Interface Monitoring provides the answer to one of the most vexing questions in SAP security: where are our vulnerable cross-system connections and how do we monitor them to ensure they’re not abused by attackers? Although Interface Monitoring, also known as Interface Channel Monitoring or ICMon, has been available in SAP Solution Manager since version 7.10 […]
Explore Service Level Reporting in SolMan 7.2
Service Level Reporting (SLR) in SAP Solution Manager performs regular checks against key performance indicators using information available from the EarlyWatch Alert (EWA), Business Warehouse (BW) and the Computer Center Management System (CCMS). The checks can be for single systems or systems grouped into solutions. Reports run automatically on a weekly or monthly schedule but […]
Three Reasons You Should Budget for SAP Breach Costs
The average cost of a data breach has now surpassed $4 million. This is according to the latest study from the Ponemon Institute issued earlier this month. The study surveyed 383 organizations in 12 countries. It revealed that not only are data breach costs increasingly across the board, the probability that organizations will suffer a breach […]
US-CERT Issues Alert for SAP Invoker Servlet Vulnerability
US-CERT published an alert yesterday to warn SAP customers of the dangers posed by the invoker servlet vulnerability in AS Java systems. According to the alert, there is evidence to suggest that SAP systems at 36 organizations have been exploited by the vulnerability. The organizations are based in the United States, United Kingdom, Germany, China, […]
How to Visualize Cyber Security Risks in Your Systems with SAP Lumira
SAP Lumira can be used to access, visualize and explore data of any size from virtually any source. It enables users to build and share powerful interactive data visualizations using a simple user-friendly interface. Since Lumira can acquire data and enable users to create customized reports through self-service, it removes the need for programming, scripting […]