SECUDE Security Center is a security analysis software platform tuned specifically for the SAP NetWeaver environment; it scans SAP instance configurations on an automated schedule for potential vulnerabilities based on company-specific guidelines and general best practices, and alarms/reports risks to appropriate personnel.
The product runs on a central server with a DB connection and is accessed via a browser-based interface. In brief, the product connects to the specified SAP instances ("up to hundreds") on an administrator defined schedule, gathers information pertaining to each SAP configuration, and returns this information to the central server for analysis and storage. Reports and alarms can be generated from this stored data for various stakeholders in the organization.
SECUDE Security Center bases its findings on an analysis of current configurations and comparison to pre-packaged best practice information, which the vendor states is frequently updated. This information contains definitions of the vulnerabilities that should be checked for, information pertaining to their resolution, and SAP NetWeaver security advisories, all of which can be accessed by the organization's security administrators. The pre-packaged information is delivered in modular components known as "Expertise Packs," with the customer able to select those packs most relevant to their organization and needs. As of this writing, two such packs are available: The Expertise Pack for SAP RFC, which helps to detect vulnerabilities in SAP Gateway configurations; and the Expertise Pack for User Access, which analyzes user-access specific vulnerabilities (vulnerabilities related to roles and permissions are not analyzed; as this platform is focused only on the NetWeaver and not the business process layer). The vendor states that additional Expertise Packs are in development.
Contact SECUDE International for further information.
product submission by EITPlanet Staff
| |||||||||||||
Latest category updates via our RSS feed
![]()
![]() |
|
Hyper-V: The Killer Feature in Windows Server 2008 It's fair to say that while many of the other new features are evolutionary, Hyper-V, by contrast, is revolutionary. Paul Rubens explores Microsoft's big step into virtualization. » Achieve flexibility and agility in your IT environment, from desktop to data centers, with Microsoft virtualization technologies. » Tune in to the on-demand Webcasts and learn how you can leverage the new features to improve your organization's networking infrastructure and security, server performance and reliability, remote resource access, and client deployment. » With Windows Server 2008 you can develop, deliver, and manage rich user experiences and applications, provide a secure network infrastructure, and increase technological efficiency and value within your organization. » Keep up with the latest tricks, tips, and news about Microsoft Windows Server 2008, as well as related technologies like Hyper-V, by reading the Windows Server 2008 blog. » |
![]() |