Avoiding Compliance Issues in ABAP code - Virtual Forge

More documents

Recommendations

Info

Externe ABAP DevelopmentPPT Masterfoliezur Erstellung von Präsentationen• Central Requirements in the Call for Tenders• General contractual Conditions (Liability etc)• Tests on all external Code• Extensive manual Penetration Testing© 2012 Virtual Forge GmbH | www.virtualforge.com | All rights reserved.
Automated Tests• Tool should have Focus on Security & CompliancePPT Masterfoliezur Erstellung von Präsentationen• Potential Synergies in other Test Domains should be leveraged• Data- and Control-Flow Analysis is important• Otherwise False-Positive Rate will be high• Performance und Scalability are important Factors• How often is new Test-Content delivered?• Explanations for Findings should be detailed and comprehensive• What is the Problem? How is it solved?• Integration into the Development Landscape / Workbench• TMS, ChaRM, SE80, …• Is SAP-specific Context considered?• Critical Tables, dangerous Kernel Calls, …© 2012 Virtual Forge GmbH | www.virtualforge.com | All rights reserved.
Page 1 and 2: Andreas WiegensteinDr. Markus Schum
Page 3: My car, my house, my boat, …Andre
Page 7 and 8: The Attack Surface of ABAPPPT Maste
Page 10 and 11: ABAP Vulnerabilities (1a)Authorizat
Page 12 and 13: ABAP Vulnerabilities (1c)Authorizat
Page 14 and 15: ABAP Vulnerabilities (2)Client Sepa
Page 16 and 17: ABAP Vulnerabilities (3)Development
Page 18 and 19: ABAP Vulnerabilities (4)Operating S
Page 20 and 21: 2. PPT Compliance Masterfolie Risks
Page 22 and 23: ABAP Code RisksExemplary technical
Page 24 and 25: Risks of SQL Injection (APP-06)Exem
Page 26 and 27: 3. PPT ABAP Masterfolie Security at
Page 28 and 29: The SDP Maturity ModelPPT Masterfol
Page 30 and 31: 4. PPT Practical Masterfolie ABAP S
Page 34 and 35: ABAP Security ResourcesPPT Masterfo

Avoiding Compliance Issues in ABAP code - Virtual Forge

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?