SAP System Security - Pradeep Kumar Mishra

. .

Auteur(s) : Pradeep Kumar Mishra

Editeur : Rheinwerk Publishing Inc.

Langue : Anglais

Parution : 01/07/2026

Format : Moyen, de 350g à 1kg

Nombre de pages : 575.0

ISBN : 1493227742

Résumé :

Stay ahead of security issues with this comprehensive guide! Get click-by-click instructions to configure the essential areas of SAP system security: application, database, platform, and infrastructure. Perform key tasks such as setting up user authentication, securing network protocols, and working with logs in your environment. Whether your system is on-premise or in the cloud, boost your security with expert advice to ensure it stays safe!

Highlights include:

1)SAP S/4HANA

2)SAP Fiori

3)Cloud applications

4)User management and authentication

5)Authorizations and role design

6)Logging and monitoring

7)Data security

8)Client security

9)Kernel security

10)Transport security

...

Biographie:
Dr. Pradeep Kumar Mishra?began his professional journey as a university mathematics teacher before transitioning to computer science. He holds a PhD in?public key cryptography, with a research focus on?elliptic and hyperelliptic curve cryptography, and later moved into industry to apply his security expertise to real-world challenges.Dr. Mishra has spent?more than 13 years working in SAP security and governance, risk, and compliance (GRC), primarily as a consultant supporting?Canada's oil and gas industry. He is a?CISSP, CISA, and CRISC-certified professional, through which he has built strong expertise in security and GRC across complex enterprise SAP landscapes.During his academic career, he published?over 20 research papers?in reputable peer-reviewed journals and conference proceedings. His research contributions are available on?Google Scholar here: https://bit.ly/4qTgOZk.Beyond his technical work, Dr. Mishra is passionate about?explaining technology in simple, nontechnical language?for a broader audience. Outside of writing and speaking about technology, he enjoys?poetry and spending time outdoors....

Sommaire:

... Preface ... 17

... Target Audience ... 17

... How This Book Is Organized ... 18 ... Acknowledgments ... 22

PART I ... Application-Level Security ... 23

1 ... User Management ... 25

1.1 ... Types of SAP User IDs ... 26 1.2 ... SAP Standard Accounts ... 28 1.3 ... Transaction SU01: Managing User Account Lifecycle ... 29 1.4 ... Transaction SU10: Managing User Accounts in Bulk ... 42 1.5 ... User Groups ... 49 1.6 ... Tables Related to User Management ... 50 1.7 ... Securing Passwords ... 51 1.8 ... Transaction SUIM: The SAP User Information Management Reports ... 57 1.9 ... Change Documents for Users ... 66 1.10 ... Security Policies ... 67 1.11 ... Miscellaneous User Management Topics ... 70 1.12 ... Summary ... 72

2 ... User Authentication ... 73

2.1 ... The Single Sign-On Concept ... 75 2.2 ... Single Sign-On Technologies for SAP ... 79 2.3 ... Setting Up a Service Provider ... 90 2.4 ... SAP Solutions for Single-Sign On ... 95 2.5 ... Summary ... 99

3 ... Authorizations and Role Design ... 101

3.1 ... SAP Authorization Concept ... 102 3.2 ... The Role Concept ... 125 3.3 ... Transaction PFCG: The Profile Generator ... 140 3.4 ... Mass Change of Field Values in Roles ... 171 3.5 ... More on Transaction Codes ... 173 3.6 ... Spool-Related Authorizations ... 181 3.7 ... Checking Authorizations in ABAP Programs ... 182 3.8 ... Transaction SACF: Switchable Authorizations ... 185 3.9 ... Other Useful Authorizations ... 187 3.10 ... Summary ... 198

4 ... SAP Fiori Security ... 201

4.1 ... Core Foundations of SAP Fiori ... 202 4.2 ... Types of SAP Fiori Apps ... 207 4.3 ... Managing Access to SAP Fiori Apps ... 210 4.4 ... SAP Fiori Authorizations and Role Design ... 232 4.5 ... Summary ... 241

5 ... Client Security ... 243

5.1 ... Client Overview ... 244 5.2 ... Managing Clients ... 245 5.3 ... Securing Clients ... 253 5.4 ... Summary ... 257

6 ... Kernel Security ... 259

6.1 ... Components of SAP Kernel ... 260 6.2 ... SAP Cryptographic Library ... 267 6.3 ... Updating the SAP Kernel ... 270 6.4 ... Patch Management ... 277 6.5 ... Summary ... 285

7 ... ABAP Development Security ... 287

7.1 ... Common Threats and Vulnerabilities ... 288 7.2 ... Managing Access to the Development Environment ... 294 7.3 ... Secure Software Development Lifecycle in ABAP ... 300 7.4 ... Tools and Techniques for ABAP Security ... 304 7.5 ... Summary ... 310

PART II ... Database-Level Security ... 311

8 ... Database Security for SAP ... 313

8.1 ... Securing a Generic Database ... 314 8.2 ... Securing the SAP HANA Database ... 321 8.3 ... Securing Data at Rest: Encryption ... 346 8.4 ... Summary ... 351

9 ... Logging and Monitoring for SAP Databases ... 353

9.1 ... Internal Controls and Audit Cycle ... 354 9.2 ... Database Monitoring Tools ... 360 9.3 ... Logging Tools ... 366 9.4 ... Security-Focused Database Monitoring ... 374 9.5 ... Summary ... 384

PART III ... Platform-Level Security ... 385

10 ... System Profiles and Parameters ... 387

10.1 ... Profiles and Parameters ... 388 10.2 ... Viewing and Maintaining Parameters ... 397 10.3 ... Profile Parameter Governance ... 403 10.4 ... Password and Other Security-Related Parameters ... 405 10.5 ... Summary ... 408

11 ... Transport Security ... 411

11.1 ... SAP Transport Mechanism ... 412 11.2 ... Role Transport ... 421 11.3 ... Authorizations Related to Tra...