Boufahja Dhiaeddine Supervised by Dr.Li Keqin & Pr.Bassem Hemidi

Graduation Project “Application Scenarios for Security

Validation & Testing”

2012-2013

© 2012 SAP AG. All rights reserved. 22

Agenda

Introduction

• Problematic

Analysis & Requirements

Design

Realization Hello SAP Netweaver Cloud! Roles User Experience CSRF Attack

Conclusion

3

Introduction

© 2012 SAP AG. All rights reserved. 4

Introduction

A complete solution

of Security Validation

& Testing

© 2012 SAP AG. All rights reserved. 5

SPaCIoS Partners

© 2012 SAP AG. All rights reserved. 6

Introduction

Pervasive Retail Application

SPaCIoS

Administration

ProfessorsStudents

© 2012 SAP AG. All rights reserved. 7

Approach

Analysis of needs

Design

RealizationTests & Validation

8

Click icon to add picture

Analysis & Requirements

© 2012 SAP AG. All rights reserved. 9

Methodology - SCRUM

10

Click icon to add picture

Design

© 2012 SAP AG. All rights reserved. 11

What’s in each solution?

Software

Quickly address the most urgent business processes

Content

SAP-supported best practices, templates, and tools make solution adoption easier

Enablement

Guides and educational material speed end-user adoption

Service

Fixed scope and price provide maximum predictability and lower risk

SAP Rapid Deployment solutions

© 2012 SAP AG. All rights reserved. 12

Analysis of needs

Security

Integrity

Non-functional

needs

Ergonomics

For administrator

• real time management of Students and Professors demands

• management of schedules

• management of users

For simple users

• making demands to the administration online

• see schedules

Functionnal Needs

© 2012 SAP AG. All rights reserved. 13

Software Scope Overview

Employee & Organizational Data

Analytics Data

Salary & Compensation Data

SA

P H

CM

Ad

d-o

n

SAP ERP HCM

BizX SuiteHCM core

Organization Management

Personnel Administration

Payroll

SAP NetWeaver Process Integration

© 2012 SAP AG. All rights reserved. 14

In the system

Key process flows covered Initial transfer of basic personnel administration organizational data Transfer of changed data records following a process-driven event, such as new hire, rehire,

termination, transfer, change of personal employee data (name and address, for example), change of e-mail address and user ID, and new manager

SuccessFactors Business Execution

SuccessFactors Business Execution

SAP ERP HCM SAP NetWeaver Process

Integration

Administraion and

Organization

Employee & Organizational Data Employee Data

SA

P H

CM

Add

-on

<WSDL> <WSDL>

SAP ERP HCM SAP NetWeaver Process

Integration

Administration and

Organization

Employee & Organizational Data Employee Data

SA

P H

CM

Add

-on

15

Click icon to add picture

Realization

© 2012 SAP AG. All rights reserved. 16

In the system

Key process flows covered Relevant salary and pay-grade data is transferred from SAP ERP HCM to SuccessFactors Business

Execution Changed compensation data such as salary change, lump-sum payment, or long-term incentive is

transferred from SuccessFactors to SAP ERP HCM

SuccessFactors Business Execution

SAP ERP HCM SAP NetWeaver Process

Integration

Administration and Payroll

Current Salary DataEmployee Data

SA

P H

CM

Add

-on

Compensation Allocations

<WSDL> <WSDL>

17

Conclusion

© 2012 SAP AG. All rights reserved. 18

Solution activation and confirmation

Implementation of options Knowledge transfer to key

users Master data load Testing of solution Switch to QA and production

Go live in as little as 5 weeks

Start RunDeploy

Expectations

1 3

Project management Kick-off workshop participation Scoping workshop Preparing technical

infrastructure

End user training Data migration Hand over of solution Go-Live Post go-live support and

activities

2

Results

Mutually-approved options selected

Working SAP system

Successful rollout and adoption Configuration documentation

Superior support to ensure smooth functioning

© 2012 SAP AG. All rights reserved. 19

Engineered Services for Rapid Deployment Solutions

Your path to Go-Live: fast, efficiently and at predictable cost Fixed-price Implementation Services Pre-defined Project Methodology Ready-to-use Accelerators

Start RunDeploy1 32

Project management Kick-off workshop participation Select options workshop Preparing technical infrastructure

Accelerators / Deliverables Service delivery model Pre-delivery requirements and

checklist Work breakdown structure (WBS) Consulting delivery guide Solution details Solution summary Scoping questionnaire and options Kick-off presentation Software requirements Solution Manager template

Solution activation and confirmation Implementation of options Knowledge transfer to key users Master data load Testing of solution Switch to QA and production

Accelerators / Deliverables Quick guide Business process documentation Best-Practices content

(pre-configuration) Scoping questionnaire and options Configuration guides Test plans and scripts

End user training Data migration Hand over of solution Go-Live Post go-live support and activities

Accelerators / Deliverables Training Materials –

Business process documentation, process-flow recordings etc.

Delivery acceptance forms

© 2012 SAP AG. All rights reserved. 20

Configuration Guide

Scoping Questionnaire

Kickoff Workshop

Project Schedule

Support PortalCheck Lists

Implementation methodology

Start RunDeploy1 32

© 2012 SAP AG. All rights reserved. 21

Project plan and timelines

Prepare Project

Kick off workshop

Select Options

Check Installation

SAP involvement Customer involvement

Start RunDeploy1 32

Activate Solution

Confirm Solution

Acceptance Testing

Train Key Users

Set up Customer Data

Transport

End-user Training and Organisation Change Management

Prepare Production

Project Sign-off &Support

Note: This slide represents a typical deployment. Exact details may differ according to solution.

© 2012 SAP AG. All rights reserved. 22

Project team: SAP

SAP Project Manager Serves as a central contact person for SAP, from

project initiation to going live and support Responsible for the coordination of SAP tasks and

project management assistance with the customer’s project manager.

SAP Consultants Responsible for implementation of the agreed upon

scope for the rapid-deployment solution

© 2012 SAP AG. All rights reserved. 23

Project team: customer

Leading Project Manager Serves as a central contact person from the customer, from

project initiation to going live and support On your side: responsible for functional and commercial

project management, coordination of customer tasks, overall project controlling and updates to the project steering committee

Basis staff Especially responsible for the installation and

administration of the SAP system landscapes

Functional department staff / key users Responsible for workshops, questions from SAP,

end-user training, and possibly as a power user for simple configurations

Specialized Staff (Optional) Responsible for further specialized areas such as

customization and configuration

Thank you for your attention