SAP Security Learning Guide

TABLE OF CONTENTS

   Introduction to SAP Security
   Identity and Access Management
   Data Protection
   Platform/Operating System Security
   Vulnerability Management
   Disaster Recovery
   Consultant's Corner
   More Security Learning Resources
   Free Security IT Downloads

Introduction to SAP Security

Return to Table of Contents

• Article: Security needs bring redundant systems back in style (SearchSecurity.com)
• Article: Open source tools: A thrifty security manager's best friend (SearchSecurity.com)
• Advice: SAP security vs. others (SearchSAP.com)
• Advice: Best security practices for large SAP installations (SearchSAP.com)
• Advice: Common SAP security practices (SearchSAP.com)
• Advice: Security concerns when upgrading from v.3.1 to v.4.6x (SearchSAP.com)
• Tip: Establishing security parameters (SearchSAP.com)
• Tip: Judicious use of tips (SearchSAP.com)

Identity and Access Management

Return to Table of Contents

• Article: Tackling identity theft (SearchSecurity.com)
• Advice: Secure social security reports (SearchSAP.com)
• Advice: Internal interface development vs. third-party middleware (SearchSAP.com)
• Tip: Synchronizing SAP with an external user registry (SearchSAP.com)
• Tip: It's not what you know; it's who you... are: The identity management challenge (SearchSecurity.com)
• Chapter Download: Identity and Access Management: Provisioning (SearchSecurity.com)

• Article: The latest play on passwords (SearchSecurity.com)
• Article: Sun converts Web SSO authentication to open source (SearchSecurity.com)
• Article: Is single sign-on ready for prime time? (SearchSecurity.com)
• Tip: Authentication and access (SearchSecurity.com)
• Tip: Prevent password change (SearchSAP.com)
• Tip: Passwords -- Updating, selecting and recording user and administrative passwords (SearchSecurity.com)
• Tip: Password policy worst practices (SearchSecurity.com)
• Tip: Parameters for establishing SAP password policies (SearchSAP.com)
• Tip: How to avoid authentication bypass attacks (SearchSecurity.com)
• Tip: Implementing single sign-on in the J2EE server engine (SearchSecurity.com)
• Tip: SAP authorizations (SearchSAP.com)
• Advice: SAP authorization and security classes (SearchSAP.com)
• Advice: Assigning limited password reset-authority (SearchSAP.com)
• Quiz: Passwords (SearchSecurity.com)
• Quiz: Secure passwords (SearchSecurity.com)
• Quiz: Authentication methods (SearchSecurity.com)
• Featured Topic: SAP passwords revealed (SearchSAP.com)
• Chapter Download: Hacking For Dummies: Chapter 7 -- Passwords (SearchSecurity.com)
• Presentation: Case study: The USPS gives SSO its stamp of approval (SearchSecurity.com)

Data Protection

Return to Table of Contents

         Regulatory Compliance

• Article: SAP to bolster compliance with reseller partnership (SearchSAP.com)
• Article: SAP launches Trade Services upgrade (SearchSAP.com)
• Article: Privacy: How much regulation is too much? (SearchSecurity.com)
• Q&A: CSO interview: Regulatory pain is a two-way street (SearchSecurity.com)
• Tip: Will the 'regulatory police' be knocking on your door? (SearchSecurity.com)
• Tip: SOX 404 compliance: Efficiency is key (SearchSecurity.com)
• Tip: SOX-in-a-box: One size does not fit all when it comes to compliance (SearchSecurity.com)
• Quiz: Respecting the letter of the law (SearchSecurity.com)
• Learning Guide: Compliance management (SearchSAP.com)
• Learning Guide: HIPAA (SearchSecurity.com)

• Article: SAP advises to take RFID one step at a time (SearchSAP.com)
• Article: Will new RFID technology help or hinder security? (SearchSecurity.com)
• Article: Low-cost way(s) to 'foil' low-tech RFID tags (SearchSecurity.com)
• Q&A: RFID secrets: SAP customers ready systems for RFID (SearchSAP.com)
• Advice: Is RFID ready for primetime? (SearchSAP.com)
• Featured Topic: RFID on the rise? (SearchSAP.com)
• Learning Guide: SAP RFID (SearchSAP.com)

• Article: Cheat sheet: 10 ways to prep for auditors (SearchSecurity.com)
• Article: Report: IT shops lax about logging (SearchSecurity.com)
• Article: SAP packs GTS application for FedEx (SearchSAP.com)
• Article: Oops! True IT blooper #3: What About Bob? (SearchSAP.com)
• Tip: Best practices for choosing an outside IT auditor (SearchSecurity.com)
• Tip: Who's afraid of auditing? (SearchSecurity.com)
• Tip: Transport program TP information logging (SearchSAP.com)

Platform/Operating System Security

Return to Table of Contents

• Article: Finding the mean between SAP and Microsoft portal extremes (SearchSAP.com)
• Article: Microsoft IT team touts SAP testing (SearchSAP.com)
• Article: Despite direct competition, Microsoft, SAP to solve integration ills (SearchSAP.com)
• Article: Can an Apple a day keep security issues at bay? (SearchSecurity.com)
• Article: Microsoft further tightens security in Windows Server (SearchSecurity.com)
• Article: Linux vs. Windows: Analysts question assumptions about security, TCO (SearchSecurity.com)
• Advice: Using Linux on the mainframe (SearchSecurity.com)
• Advice: Single sign-on for UNIX (SearchSAP.com)
• Advice: I learned SAP BW on Windows, how does this compare to Unix? (SearchSAP.com)
• Commentary: MacIntosh vs. Windows: Choosing to take a bite of the Apple (SearchSecurity.com)
• Tip: Uploading transport files from Windows to UNIX on IBM (SearchSAP.com)
• Tip: Battle of the OSes: Which is most secure? (SearchSecurity.com)
• Tip: Essential Linux skills (SearchSecurity.com)
• Chapter Download: Hacking Windows: MSRPC vulnerabilities (SearchSecurity.com)

Vulnerability Management

Return to Table of Contents

• Article: Customers warned of critical SAP flaw (SearchSAP.com)
• Article: How to survive a data breach (SearchSecurity.com)
• Tip: Eliminating spam with SpamAssassin, DSPAM and ClamAV (SearchSAP.com)
• Tip: Firewalls: How to choose what's right for you (SearchSAP.com)
• Advice: Is it possible to scan an SAP e-mail attachment for a virus/worm? (SearchSAP.com)
• Advice: Errors with uploading patches in 4.7 (SearchSAP.com)
• Advice: Decompressing HR patches (SearchSAP.com)
• Advice: Can I supply packages while users are online? (SearchSAP.com)
• Advice: Applying support packages in the development box (SearchSAP.com)
• Advice: What is the best way to encrypt messages? (SearchSAP.com)
• Advice: How do I secure an IDoc? (SearchSAP.com)
• Advice: Password protected e-mails (SearchSAP.com)

Disaster Recovery

Return to Table of Contents

• Article: Disaster recovery: Are you prepared? (SearchSAP.com)
• Article: Concerns raised on tape backup methods (SearchSecurity.com)
• Tip: Disaster recover spending -- How much is enough? (SearchSAP.com)
• Tip: BCP plans key to emergency planning (SearchSAP.com)
• Tip: Disaster recovery (SearchSAP.com)
• Tip: Restore a back-up tape and recover usable data (SearchSecurity.com)
• Tip: Disaster recovery/business continuity plans (SearchSecurity.com)

Consultant's Corner

Return to Table of Contents

• Advice: Security consultant wanting to make the move to SAP (SearchSAP.com)
• Advice: The next step for an experienced SAP security consultant (SearchSAP.com)
• Advice: SAP security analysts salary (SearchSAP.com)
• Advice: SAP security course for R/3 4.6C (SearchSAP.com)
• Article: CISSP among highest paying certifications (SearchSecurity.com)
• Security School: Training for CISSP Certification (SearchSecurity.com)
• Resource Guide: SearchSecurity.com Guide to Infosec Certifications (SearchSecurity.com)
• Resource Guide: Vendor-specific security certs (SearchSecurity.com)

More Security Learning Resources

	SECURITY SCHOOL		LEARNING GUIDES		CHECKLISTS		GLOSSARY		ASK THE EXPERTS

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT Database Security Fortinet acquires database vulnerability scanner from IPLocks Information security book excerpts and reviews Product review: Symantec Database Security 3.1 New SQL injection technique threatens Oracle databases Oracle fixes 41 flaws in April CPU The ins and outs of database encryption Product Review: Imperva's SecureSphere Database Gateway Product review: Application Security Inc.'s DbProtect Oracle patches serious holes with latest CPU Survey finds thousands of database servers open to attack Database Security Research Secure Software Development Software still plagued with security holes, researcher says Microsoft tools won't be quick fix for SQL injection attacks Which automated quality assurance tools can be used to test software? Gary McGraw on secure software development Product review: Mu-4000 Security Analyzer Product review: Klocwork Insight 8.0 HP aims at IBM with application vulnerability scanning as service Information security book excerpts and reviews 7 Security Questions to Ask Your SaaS Provider Product review: CodeArmor 2.2 for Microsoft .NET Mac OS Security Apple updates QuickTime to plug dangerous flaw Apple patches dangerous Mac flaws RE:trace framework aids in OS X, Unix flaw discovery Java flaws haunt Mac OS X Hefty security fix for Apple Mac OS X, Safari Apple releases QuickTime security fix Exploit code targets Apple Mac OS X Apple releases fixes for Mac OS X, iPhone vulnerabilities iPhone mania Apple tackles a new QuickTime flaw Mac OS Security Research

RELATED GLOSSARY TERMS Terms from Whatis.com − the technology online dictionary data encryption/decryption IC  (SearchSecurity.com) International Data Encryption Algorithm  (SearchSecurity.com) link encryption  (SearchSecurity.com) MD2  (SearchSecurity.com) MD4  (SearchSecurity.com) MD5  (SearchSecurity.com)

RELATED RESOURCES 2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems Search Bitpipe.com for the latest white papers and business webcasts Whatis.com, the online computer dictionary