Slashdot Mirror
Top Cyber Attack Vectors For Critical SAP Systems
An anonymous reader writes: Despite housing an organization's most valuable and sensitive information, SAP systems are not protected from cyber threats by traditional security approaches. Based on assessments of hundreds of SAP implementations, the Onapsis Research Labs study found that over 95 percent of SAP systems were exposed to vulnerabilities that could lead to full compromise of the company's business data and processes. Most companies are also exposed to protracted patching windows averaging 18 months or more. In 2014 alone, 391 security patches were released by SAP, averaging more than 30 per month. Almost 50 percent of them were ranked as "high priority" by SAP.
A 'sap' is a small blunt weapon, usually a leather sack of lead shot, used to incapacitate a target. A 'SAP system' is a gargantuan and expensive piece of ERP software used to incapacitate a corporation.
I do not disagree at all that SAP sucks. I work for a large retailer and sit right next to the SAP guys. I've never seen such a miserable lot. Daily banging their heads against one stupid SAP issue after another and always complaining about SAP support being completely useless.
I'm just not sure I buy the 95% of installs are horribly insecure claims coming from a company that's only product is securing SAP.
Systeme, Anwendungen und Produkte (Systems, Applications, and Products).
www.sap.com
Basically it's one of the two the largest Enterprise Resource Planning software companies in the world. Oracle is the other one. And since most SAP systems are run inside a highly protected corporate network, the self-promoting hysteria from this article is so much bullcrap.