SystemProfiler 3SystemProfiler: optimal protection for SAP systems 4 SYSTEMPROFILER enables you to...
Transcript of SystemProfiler 3SystemProfiler: optimal protection for SAP systems 4 SYSTEMPROFILER enables you to...
![Page 1: SystemProfiler 3SystemProfiler: optimal protection for SAP systems 4 SYSTEMPROFILER enables you to secure and monitor your entire SAP system landscape to ensure frictionless system](https://reader034.fdocuments.net/reader034/viewer/2022043017/5f398dc2ff9124750a31203b/html5/thumbnails/1.jpg)
![Page 2: SystemProfiler 3SystemProfiler: optimal protection for SAP systems 4 SYSTEMPROFILER enables you to secure and monitor your entire SAP system landscape to ensure frictionless system](https://reader034.fdocuments.net/reader034/viewer/2022043017/5f398dc2ff9124750a31203b/html5/thumbnails/2.jpg)
SystemProfiler 3.0
Bridging the gap to IT security
![Page 3: SystemProfiler 3SystemProfiler: optimal protection for SAP systems 4 SYSTEMPROFILER enables you to secure and monitor your entire SAP system landscape to ensure frictionless system](https://reader034.fdocuments.net/reader034/viewer/2022043017/5f398dc2ff9124750a31203b/html5/thumbnails/3.jpg)
3
Challenges for SAP Security
Organizational
SAP department ≠ IT department
SAP security ≠ IT security
Technology
Fast technology evolution: HANA, Cloud, mobile
Increased complexity for SAP landscapes
External
Increased awarenes about SAP vulnerabilities within hacker community
Regulative pressure (SOX, PCI DSS, …)
![Page 4: SystemProfiler 3SystemProfiler: optimal protection for SAP systems 4 SYSTEMPROFILER enables you to secure and monitor your entire SAP system landscape to ensure frictionless system](https://reader034.fdocuments.net/reader034/viewer/2022043017/5f398dc2ff9124750a31203b/html5/thumbnails/4.jpg)
SystemProfiler: optimal protection for SAP systems
4
SYSTEMPROFILER
enables you to secure and
monitor your entire SAP
system landscape to ensure
frictionless system operations
Benefits
Saves effort in validating and
correcting security relevant settings
Prevents issues arising from
insecure or unstable configurations
Increased compliance to internal
and external standards for the
entire SAP system landscape
![Page 5: SystemProfiler 3SystemProfiler: optimal protection for SAP systems 4 SYSTEMPROFILER enables you to secure and monitor your entire SAP system landscape to ensure frictionless system](https://reader034.fdocuments.net/reader034/viewer/2022043017/5f398dc2ff9124750a31203b/html5/thumbnails/5.jpg)
The 3-phased process
The SystemProfiler strategy follows a simple approach:
Assess – Clean Up – Monitor
Assess – record status:
SystemProfiler identifies risks and issues and
provides a comprehensive overview of the
configuration status of the entire SAP system
landscape.
Clean Up – f rame and enforce rules:
Security polices for each indiviual system can easily
be configured and enforced using SystemProfiler.
Monitor – full transparency:
SystemProfiler continuously monitors SAP
environments, integrates with external and internal
reporting and SIEM solutions and reports each
newly found issue proactively.
Security, Compliance
& Quality
1. Assess
2. Safeguard 3. Optimize
![Page 6: SystemProfiler 3SystemProfiler: optimal protection for SAP systems 4 SYSTEMPROFILER enables you to secure and monitor your entire SAP system landscape to ensure frictionless system](https://reader034.fdocuments.net/reader034/viewer/2022043017/5f398dc2ff9124750a31203b/html5/thumbnails/6.jpg)
SystemProfiler 3.0
SIEM Integration
![Page 7: SystemProfiler 3SystemProfiler: optimal protection for SAP systems 4 SYSTEMPROFILER enables you to secure and monitor your entire SAP system landscape to ensure frictionless system](https://reader034.fdocuments.net/reader034/viewer/2022043017/5f398dc2ff9124750a31203b/html5/thumbnails/7.jpg)
SIEM coverage
SIEM
SIEM covers many devices / information:
Network data
Identity Management
Security devices
Firewall
Routers
Databases
…and yes, there‘s application data, but:
SIEM systems do not cover SAP systems
![Page 8: SystemProfiler 3SystemProfiler: optimal protection for SAP systems 4 SYSTEMPROFILER enables you to secure and monitor your entire SAP system landscape to ensure frictionless system](https://reader034.fdocuments.net/reader034/viewer/2022043017/5f398dc2ff9124750a31203b/html5/thumbnails/8.jpg)
SystemProfiler bridges the gap to IT security
SIEM
Security
Config
Code
Roles
![Page 9: SystemProfiler 3SystemProfiler: optimal protection for SAP systems 4 SYSTEMPROFILER enables you to secure and monitor your entire SAP system landscape to ensure frictionless system](https://reader034.fdocuments.net/reader034/viewer/2022043017/5f398dc2ff9124750a31203b/html5/thumbnails/9.jpg)
SIEM interface
9
SystemProfiler enables an intelligent processing of critical events from the entire
SAP system landscape by external SIEM solutions
Default integration
Test Cases of category “forensics” are pre-defined for SIEM processing
Additional Test Cases can be added easily
Important features
Intelligent pre-qualification of events
Immediate processing
Central approach
Detection of duplicates & status management
Extendable content
![Page 10: SystemProfiler 3SystemProfiler: optimal protection for SAP systems 4 SYSTEMPROFILER enables you to secure and monitor your entire SAP system landscape to ensure frictionless system](https://reader034.fdocuments.net/reader034/viewer/2022043017/5f398dc2ff9124750a31203b/html5/thumbnails/10.jpg)
10
Example:
Processing of SystemProfiler events in splunk
![Page 11: SystemProfiler 3SystemProfiler: optimal protection for SAP systems 4 SYSTEMPROFILER enables you to secure and monitor your entire SAP system landscape to ensure frictionless system](https://reader034.fdocuments.net/reader034/viewer/2022043017/5f398dc2ff9124750a31203b/html5/thumbnails/11.jpg)
SystemProfiler 3.0
HANA security
![Page 12: SystemProfiler 3SystemProfiler: optimal protection for SAP systems 4 SYSTEMPROFILER enables you to secure and monitor your entire SAP system landscape to ensure frictionless system](https://reader034.fdocuments.net/reader034/viewer/2022043017/5f398dc2ff9124750a31203b/html5/thumbnails/12.jpg)
12
Challenges HANA Security & Quality
HANA is an attractive target for hackers
New technology – little experience – probability of security misconfigurations
Many known and new risks apply to HANA
R-Serve
RAM-Scraping
Web applications
Custom developments
Complexity of SAP system landscapes increases with HANA
For an optimal use,of HANA many settings need to be adjusted
![Page 13: SystemProfiler 3SystemProfiler: optimal protection for SAP systems 4 SYSTEMPROFILER enables you to secure and monitor your entire SAP system landscape to ensure frictionless system](https://reader034.fdocuments.net/reader034/viewer/2022043017/5f398dc2ff9124750a31203b/html5/thumbnails/13.jpg)
13
Virtual Forge HANA Security Suite
Optimzing ABAP-Code for HANA Usage (CodeProfiler)
HANA Test Cases(HANA Readiness & Optimization)
Automated Correction („Quick Fix“ and Bulk)
Securing HANA configuration (SystemProfiler´)
Additional platform for SystemProfiler
Test Cases, e.g. communication security, authorization, others
CodeProfiler for HANA
Eclipse and WebIDE Integration
First HANA Code Scanner ever
![Page 14: SystemProfiler 3SystemProfiler: optimal protection for SAP systems 4 SYSTEMPROFILER enables you to secure and monitor your entire SAP system landscape to ensure frictionless system](https://reader034.fdocuments.net/reader034/viewer/2022043017/5f398dc2ff9124750a31203b/html5/thumbnails/14.jpg)
Securing HANA configurations with SystemProfiler
![Page 15: SystemProfiler 3SystemProfiler: optimal protection for SAP systems 4 SYSTEMPROFILER enables you to secure and monitor your entire SAP system landscape to ensure frictionless system](https://reader034.fdocuments.net/reader034/viewer/2022043017/5f398dc2ff9124750a31203b/html5/thumbnails/15.jpg)
Target system SAP HANA
15
HANA integration
Connection through database connection
installation on HANA-Proxy only (SAINT/SPAM)
Test Cases execute in ABAP implemented SQL Statements
![Page 16: SystemProfiler 3SystemProfiler: optimal protection for SAP systems 4 SYSTEMPROFILER enables you to secure and monitor your entire SAP system landscape to ensure frictionless system](https://reader034.fdocuments.net/reader034/viewer/2022043017/5f398dc2ff9124750a31203b/html5/thumbnails/16.jpg)
Checking HANA development in real time
![Page 17: SystemProfiler 3SystemProfiler: optimal protection for SAP systems 4 SYSTEMPROFILER enables you to secure and monitor your entire SAP system landscape to ensure frictionless system](https://reader034.fdocuments.net/reader034/viewer/2022043017/5f398dc2ff9124750a31203b/html5/thumbnails/17.jpg)
…there‘s more
![Page 18: SystemProfiler 3SystemProfiler: optimal protection for SAP systems 4 SYSTEMPROFILER enables you to secure and monitor your entire SAP system landscape to ensure frictionless system](https://reader034.fdocuments.net/reader034/viewer/2022043017/5f398dc2ff9124750a31203b/html5/thumbnails/18.jpg)
Reporting Dashboards
![Page 19: SystemProfiler 3SystemProfiler: optimal protection for SAP systems 4 SYSTEMPROFILER enables you to secure and monitor your entire SAP system landscape to ensure frictionless system](https://reader034.fdocuments.net/reader034/viewer/2022043017/5f398dc2ff9124750a31203b/html5/thumbnails/19.jpg)
Reporting API
SystemProfiler provides data for any type of reporting solutions
Features
API consists of four function modules
The most recent result of all chosen results will be provided, including master
data and description
Standardized API for all Virtual Forge solutions
Outlook
Reporting Dashboard (Browser / Mobile Devices)
API can be called externally (Webservice)
19
![Page 20: SystemProfiler 3SystemProfiler: optimal protection for SAP systems 4 SYSTEMPROFILER enables you to secure and monitor your entire SAP system landscape to ensure frictionless system](https://reader034.fdocuments.net/reader034/viewer/2022043017/5f398dc2ff9124750a31203b/html5/thumbnails/20.jpg)
SP 3.0 At a Glance
20
Inspections of SAP HANA
Extensible SIEM Interface
Reporting API
Collectors and Metrics
Customer Test Cases on NW AS Java
New Test Cases
![Page 21: SystemProfiler 3SystemProfiler: optimal protection for SAP systems 4 SYSTEMPROFILER enables you to secure and monitor your entire SAP system landscape to ensure frictionless system](https://reader034.fdocuments.net/reader034/viewer/2022043017/5f398dc2ff9124750a31203b/html5/thumbnails/21.jpg)
Thank you! Feel free to write or call for any questions and requests
25
Patrick Boch
Blog Whitepapers Twitter
www.virtualforge.com
![Page 22: SystemProfiler 3SystemProfiler: optimal protection for SAP systems 4 SYSTEMPROFILER enables you to secure and monitor your entire SAP system landscape to ensure frictionless system](https://reader034.fdocuments.net/reader034/viewer/2022043017/5f398dc2ff9124750a31203b/html5/thumbnails/22.jpg)