Security Patterns

[Security Patterns @securitypattern]

On the road for 2 days. 3 scans of custom code. Benchmark confirmed: on average 1 critical defect in 1.000 Lines of ABAP code.

[Security Patterns @securitypattern]

On average 1 critical security defect in 1.000 LoC. Don't believe it? Bring your #ABAP code and we scan it @sapteched. Hall 10, booth 1075

[Security Patterns @securitypattern]

#SAPteched session #SAPRunsSAP – highly recommended: hacking of SAP systems & learn how to defend - visit SIS203 - http://t.co/XNvi7onw

[CodeProfiler @codeprofiler]

#SAP #0-day used to attack Greek government? http://t.co/ZhaJecbb

[Security Patterns @securitypattern]

Remote Function Call: Gateway Hacking and Defense
http://t.co/kl3uYQpC

[Security Patterns @securitypattern]

Most noteworthy patch released in September deals with a code injection vulnerability affecting version 7.20 of SAP GUI
http://t.co/iLUwbW5x

[Security Patterns @securitypattern]

Hacker's exploit zero day bugs 10 months before they are exposed. http://t.co/8ITqfi0A

[Security Patterns @securitypattern]

Acknowledgments to Security Researchers http://t.co/16VxOjId #SCN via @SAPCommNet

[Security Patterns @securitypattern]

3 2 1 ... SAP_ALL at @_DSAG Jahreskongress in Bremen, Germany

[Charlie Miller @0xcharlie]

If you want to regulate something, regulate software development. Hold vendors responsible when their bugs cause harm.

[Sebastian Schinzel @[email protected] @seecurity]

"We don’t need to fix those vulns; we have a WAF." http://t.co/arPDrXJK // via @sec_reactions

[Security Patterns @securitypattern]

1,5 Mio credit card numbers stolen - Global Payments tries to play it down. Anyone who cars? http://t.co/VHbKyucu

[Security Patterns @securitypattern]

@USR02 very good work on the whitepaper "Secure Configuration SAP NetWeaver Application Server ABAP". Content to the point :-)

[Security Patterns @securitypattern]

Gartner selected Virtual Forge as Cool Vendor in the SAP Ecosystem. http://www.gartner.com/DisplayDocument?id=1635015 (for Gartner clients).

[Security Patterns @securitypattern]

Attacking sap clients: http://dsecrg.com/files/pub/pdf/SAP_Security_-_attacking_SAP_clients.pdf

[Security Patterns @securitypattern]

XSS in SAP BusinessObjects. http://www.procheckup.com/vulnerability_manager/documents/document_1263821657/attachments/BusinessObj.pdf

[Security Patterns @securitypattern]

SAP GUI (sapgui) - DLL hijacking: http://dsecrg.com/pages/vul/show.php?id=314

[Security Patterns @securitypattern]

Nice recording about key security topics, incl. SP. German only: http://blog.radiotux.de/2011/04/16/binaergewitter-2-sichere-systeme/

[Security Patterns @securitypattern]

Interview mit Gary McGraw: The ugly baby phenomenon and why you should not focus on false positives. http://tinyurl.com/built-it-in

[Security Patterns @securitypattern]

Sign up and be a Trooper - don't miss this key Security community event: https://www.troopers.de/sign-up/