Securing Administrative Access in SAP AS Java
Administrative access in SAP NetWeaver Application Server for Java (AS Java) is secured by granting UME administrative roles and actions, such as Manage_All, Manage_Roles and Manage_Users, only to users who need them (least privilege), and by monitoring privileged users and new privilege grants with the Cybersecurity Extension for SAP Solution Manager. Executive Summary Misuse of […]
Webinar Recording: Security Analytics with SAP Web Intelligence
This webinar replay shows how SAP Web Intelligence, running on the BusinessObjects platform, turns SAP Solution Manager data into interactive security reports. It covers vulnerabilities, missing security notes and open alerts, with charts, tables, comments for tracking remediation, and remote access. Executive Summary Web Intelligence connects directly to data sources in SAP Solution Manager and […]
Secure, Patch & Respond: Security Analytics with SAP Web Intelligence
SAP Web Intelligence lets users visualize and manage security risks in SAP systems through interactive web reports. Powered by the BusinessObjects platform, it connects directly to SAP Solution Manager data to show vulnerabilities, missing security notes and open alerts using dynamic charts, graphs and detailed tables. Executive Summary SAP Web Intelligence reports summarize SAP security […]
How to Comply with the DHS Recommendations for Securing SAP Systems from Cyber Attacks
SAP Solution Manager helps you comply with the DHS recommendations for securing SAP systems by covering all seven: vulnerability scanning, interface analysis, privileged-user review, indicator-of-compromise monitoring, user-behaviour monitoring, threat intelligence updates and baseline compliance monitoring, using Configuration Validation, System Recommendations, ICMon and the Monitoring and Alerting Infrastructure. Executive Summary In response to a rise in […]
DHS Issues Warning for Cyber Attacks Targeting SAP Applications
The United States Department of Homeland Security issued a warning this week for malicious cyber activity targeting ERP applications including SAP. The warning is based on the findings of a recent report issued by Digital Shadows. The report discusses the dramatic rise in cyber attacks on widely used ERP applications. The report echoes the findings of […]
Equifax Data Breach: Attackers Exploited an Unapplied Security Patch, not a Zero-Day Vulnerability
On September 15, Equifax released a statement to confirm the initial attack vector that led to the compromise of personal information relating to 143 million consumers in the US, UK and Canada targeted an Apache Struts vulnerability within a web application that supports the organization’s online dispute portal. The patch for the vulnerability had been […]
Discover Vulnerable System Connections with Interface Monitoring
Interface Monitoring provides the answer to one of the most vexing questions in SAP security: where are our vulnerable cross-system connections and how do we monitor them to ensure they’re not abused by attackers? Although Interface Monitoring, also known as Interface Channel Monitoring or ICMon, has been available in SAP Solution Manager since version 7.10 […]
Security KPI Monitoring with SolMan Dashboards
SAP Fiori revolutionizes the user experience in Solution Manager 7.2. The dynamic tile-based layout replaces the work center approach in Solution Manager 7.1. In fact, since the Fiori launchpad provides direct and customizable access to applications, it virtually removes the role of work centers in Solution Manager. Fiori and Fiori Apps are the first pillar […]
Explore Service Level Reporting in SolMan 7.2
Service Level Reporting (SLR) in SAP Solution Manager performs regular checks against key performance indicators using information available from the EarlyWatch Alert (EWA), Business Warehouse (BW) and the Computer Center Management System (CCMS). The checks can be for single systems or systems grouped into solutions. Reports run automatically on a weekly or monthly schedule but […]
Introducing the SAP Cybersecurity Framework 4.0
Cyber attacks are at epidemic levels. According to research performed by 360 Security, there were over 85 billion attacks in 2015, equivalent to 2000 attacks per second. The cost of data breaches continues to grow, year after year, and reached record levels in 2016. Juniper Research estimate that average costs will exceed $150M within three […]