Avoiding Compliance Issues in ABAP code - Virtual Forge

More documents

Recommendations

Info

ABAP Vulnerabilities (4)Operating System CommandsPPT Masterfolie1. Kernel callszur Erstellung von PräsentationenCALL 'SYSTEM' ID 'COMMAND' FIELD 'net.exe user test pass /add'ID 'TAB'FIELD rt-*sys*.2. Filter option in OPEN DATASETOPEN DATASET lv_fileFOR OUTPUTIN TEXT MODE ENCODING DEFAULTFILTER 'format c:'.3. Residual Risks© 2012 Virtual Forge GmbH | www.virtualforge.com | All rights reserved.
General Problems in ABAP SecurityPPT Masterfoliezur Erstellung von Präsentationen• No Precedent (ABAP Hack) in the press• Managers and Developers lack Awareness• Very large amounts of custom Code• Massive Legacy Problems• No central Responsibility in Corporations• ABAP Security is a an S.E.P. (Someone Else’s Problem)• Quality of 3 rd Party Code not transparent• Backdoors & Security Defects are Part of the Delivery• Missing Know-How• No Guidelines, No Trainings, No Test Tools© 2012 Virtual Forge GmbH | www.virtualforge.com | All rights reserved.
Page 1 and 2: Andreas WiegensteinDr. Markus Schum
Page 3: My car, my house, my boat, …Andre
Page 7 and 8: The Attack Surface of ABAPPPT Maste
Page 10 and 11: ABAP Vulnerabilities (1a)Authorizat
Page 12 and 13: ABAP Vulnerabilities (1c)Authorizat
Page 14 and 15: ABAP Vulnerabilities (2)Client Sepa
Page 16 and 17: ABAP Vulnerabilities (3)Development
Page 20 and 21: 2. PPT Compliance Masterfolie Risks
Page 22 and 23: ABAP Code RisksExemplary technical
Page 24 and 25: Risks of SQL Injection (APP-06)Exem
Page 26 and 27: 3. PPT ABAP Masterfolie Security at
Page 28 and 29: The SDP Maturity ModelPPT Masterfol
Page 30 and 31: 4. PPT Practical Masterfolie ABAP S
Page 32 and 33: Externe ABAP DevelopmentPPT Masterf
Page 34 and 35: ABAP Security ResourcesPPT Masterfo

Avoiding Compliance Issues in ABAP code - Virtual Forge

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?