Top sap security Online Training |SAP Security Training Classes.

1
(No Transcript)
2
SAP SECURITY

• MWR have long been interested in SAP security.
  Its very clear from talking to our clients, and
  to the attendees of our regular that SAP security
  issues are at the forefront of their agenda.
  Given that SAP systems are the core operational
  system of many businesses, where even the
  smallest level of compromise can have devastating
  effects, this comes as no surprise. What does
  come as a surprise is how many organizations.

3
SAP SECURITY

• A companys IT security policy should specify
  mandatory software requirements for things such
  as minimum password length, password strength,
  number of password fails allowed before account
  lockout, etc.  These requirements should be
  followed by all applications, and SAP is no
  exception. 

4
SAP SECURITY

• SAP systems also have resident
  vulnerabilities, just like any other
  software. SAP publishes security notes that are
  akin to Microsoft Security Bulletins, Red Hat
  Security Announcement or Oracle Critical Patch
  Updates and/or Security Alerts, Oracle or Cisco!
  The results of the research conducted by ERP
  SCAN show that the number of vulnerabilities per
  year is reducing, but worryingly the criticality
  of the discovered/reported issues is increasing.

5
SAP SECURITY

• It is important to note, before we dive in,
  that SAP are making great efforts publically to
  appear to be making security a priority. They
  have implemented an internal SDLC process, hold
  security summits for internal teams and are
  investing in automatic and manual security
  assessments of new and old software versions. All
  of these efforts are to be commended. However,
  there are many reasons why SAP security is such
  an issue and no one individual can really be
  blamed.

6
SAP SECURITY
7
SAP SECURITY

• Many of the systems discovered on the Internet
  were also reportedly found to be running
  vulnerable services and/or old and out of date
  versions of SAP software. In addition, it was
  found that systems could be exposed to attack
  from unauthenticated attackers and/or
  authenticated attackers (who could gain access
  using default well known username/password
  combinations. In MWRs experience, once a
  foothold on a SAP system is obtained compromise.

8
SAP SECURITY
9
Thank You

• By
• HYDERABADSYS Online Training
• Contact Us
• HYDERABADSYS.COM
• INDIA 91 9030400777   
• USA 1-347-606-2716
•  Email contact_at_Hyderabadsys.com