SAP Vulnerability Assessment vs Penetration Testing
Vulnerability assessments and penetration tests are complementary but should be deployed sequentially: vulnerability assessments come first, then penetration testing against hardened systems. Testing systems that have not been hardened gives predictable results, since the objective of penetration testing is to assess the strength of security defenses. Executive Summary Vulnerability assessment and penetration testing both serve […]
Recommended Settings for SAP Logging and Auditing
Recommended SAP logging settings keep security-relevant events while limiting disk and table space use. Maintain static filters in the Security Audit Log, set HTTP, gateway, Java and HANA logging options, and archive each log area as described. The Cybersecurity Extension for SAP Solution Manager monitors these logs to detect indicators of compromise. Executive Summary The […]
Webinar: 10KBLAZE – Secure Your SAP Systems with CVA and SolMan
SAP Code Vulnerability Analyzer (CVA) and SAP Solution Manager together help secure SAP systems against 10KBLAZE exploits. CVA performs static code analysis to detect vulnerabilities in custom code, and Solution Manager detects vulnerabilities and threats in components such as the gateway server, message server and SAProuter. This webinar from SAP and Layer Seven Security was […]
Securing Administrative Access in SAP AS Java
Administrative access in SAP NetWeaver Application Server for Java (AS Java) is secured by granting UME administrative roles and actions, such as Manage_All, Manage_Roles and Manage_Users, only to users who need them (least privilege), and by monitoring privileged users and new privilege grants with the Cybersecurity Extension for SAP Solution Manager. Executive Summary Misuse of […]
Webinar Recording: Security Analytics with SAP Web Intelligence
This webinar replay shows how SAP Web Intelligence, running on the BusinessObjects platform, turns SAP Solution Manager data into interactive security reports. It covers vulnerabilities, missing security notes and open alerts, with charts, tables, comments for tracking remediation, and remote access. Executive Summary Web Intelligence connects directly to data sources in SAP Solution Manager and […]
Secure, Patch & Respond: Security Analytics with SAP Web Intelligence
SAP Web Intelligence lets users visualize and manage security risks in SAP systems through interactive web reports. Powered by the BusinessObjects platform, it connects directly to SAP Solution Manager data to show vulnerabilities, missing security notes and open alerts using dynamic charts, graphs and detailed tables. Executive Summary SAP Web Intelligence reports summarize SAP security […]
How to Comply with the DHS Recommendations for Securing SAP Systems from Cyber Attacks
SAP Solution Manager helps you comply with the DHS recommendations for securing SAP systems by covering all seven: vulnerability scanning, interface analysis, privileged-user review, indicator-of-compromise monitoring, user-behaviour monitoring, threat intelligence updates and baseline compliance monitoring, using Configuration Validation, System Recommendations, ICMon and the Monitoring and Alerting Infrastructure. Executive Summary In response to a rise in […]
DHS Issues Warning for Cyber Attacks Targeting SAP Applications
The United States Department of Homeland Security issued a warning this week for malicious cyber activity targeting ERP applications including SAP. The warning is based on the findings of a recent report issued by Digital Shadows. The report discusses the dramatic rise in cyber attacks on widely used ERP applications. The report echoes the findings of […]
Top Five Tips for System Recommendations
System Recommendations in SAP Solution Manager connects directly to SAP Support for real-time patch updates. It also connects to each system within SAP landscapes to monitor patch levels. SysRec downloads corrections for security vulnerabilities from SAP Support to each system and integrates with other areas in Solution Manager for change impact analysis, change management, and […]
Equifax Data Breach: Attackers Exploited an Unapplied Security Patch, not a Zero-Day Vulnerability
On September 15, Equifax released a statement to confirm the initial attack vector that led to the compromise of personal information relating to 143 million consumers in the US, UK and Canada targeted an Apache Struts vulnerability within a web application that supports the organization’s online dispute portal. The patch for the vulnerability had been […]