SAP Discloses Security Gaps in Cloud Solutions (May 2020)
In May 2020, SAP disclosed security lapses across several of its cloud-based products, including SAP Cloud Platform, SAP Analytics Cloud, SuccessFactors, and Concur. The company identified these issues during an internal security review and initiated remediation efforts for approximately 9% of its 440,000 customers. Executive Summary The May 2020 announcement from SAP revealed that specific […]
Layer Seven Security Recognized as a Top 25 Cyber Security Company for 2020
Layer Seven Security has been named one of the Top 25 Cyber Security Companies for 2020 by the editorial board of CIO Applications. This recognition highlights the firm’s innovative Cybersecurity Extension for SAP Solution Manager, a solution designed to provide automated vulnerability management, threat detection, and incident response for business-critical SAP systems. Why was Layer […]
How to Secure the SAProuter from Remote Attacks
The SAProuter is a critical reverse proxy for remote SAP access, but its internet-facing position makes it a high-value target for remote exploits. Proper configuration—including restricted route permission tables, enforced SNC, and regular patching—is essential to prevent attackers from using the SAProuter to pivot into and compromise internal SAP servers. Executive Summary As remote work […]
Dramatic Growth in Cyber Attacks and Enterprise Risk
Cyber attacks increased by six times their usual levels between February and March 2020, driven by the COVID-19 pandemic and a sudden shift to remote work. Hacking and phishing attempts rose by 37% in one month, while the exposure of Remote Desktop Protocol (RDP) and VPN services grew significantly, creating new vulnerabilities for enterprises. The […]
SIEM Integration for SAP: Challenges and Solutions
Integrating SAP logs directly into Security Information and Event Management (SIEM) systems is often a complex and costly process. By leveraging SAP Solution Manager to filter, structure, and enrich security event data, organizations can achieve seamless integration while avoiding the high maintenance and licensing costs associated with direct log ingestion. Watch the Webinar: You can view […]
SIEM Integration for SAP: Challenges and Best Practices
Directly integrating SAP logs into a SIEM system often creates significant operational hurdles, including high log volumes, complex maintenance requirements, and difficulties with event correlation. Organizations can overcome these challenges by using SAP Solution Manager as an intermediary to streamline data flow, improve threat detection, and simplify security operations. Executive Summary Integrating SAP systems with […]
SIEM Integration with SAP Solution Manager
Integrating SAP application logs with SIEM platforms is hard because of log complexity, volume, maintenance and missing IP data. The Cybersecurity Extension for SAP Solution Manager overcomes these obstacles by filtering, normalizing and enriching SAP security event data. Executive Summary Security Information and Event Management (SIEM) platforms collect log data from applications, hosts, routers, switches, firewalls and […]
64% of ERP Systems Have Experienced Security Breaches Between 2017-19
According to an independent survey of 430 IT decision makers, 64 percent of ERP deployments have experienced security breaches in the past 24 months. The findings are published in the report ERP Security: The Reality of Business Application Protection. Most of the breaches compromised sensitive data, including sales, HR, customer, financial and intellectual property data. […]
SAP Vulnerability Assessment vs Penetration Testing
Vulnerability assessments and penetration tests are complementary but should be deployed sequentially: vulnerability assessments come first, then penetration testing against hardened systems. Testing systems that have not been hardened gives predictable results, since the objective of penetration testing is to assess the strength of security defenses. Executive Summary Vulnerability assessment and penetration testing both serve […]
Recommended Settings for SAP Logging and Auditing
Recommended SAP logging settings keep security-relevant events while limiting disk and table space use. Maintain static filters in the Security Audit Log, set HTTP, gateway, Java and HANA logging options, and archive each log area as described. The Cybersecurity Extension for SAP Solution Manager monitors these logs to detect indicators of compromise. Executive Summary The […]