BIZEC SAP Security Workshop

March 15, 2016 (at 9 a.m.)

Due to last year's great feedback, the 5th BIZEC SAP security workshop is again held in CTF style:

Participants will be challenged to spot weaknesses in the defense setup of our demo systems. This challenge will take place in the spirit of a "Capture The Flag" (CTF) competition. As we are aware that not all participants have deep technical understanding, the CTF activities will be guided. Once the participants are able to penetrate the defenses, we will discuss countermeasures and to what degree the attacks are detectable by SAP standard logging and monitoring. The technological basis will be AS ABAP as well as HANA.

Participants need to bring their own laptop (SAP GUI installation required).

We provide 5 CTF sessions, all based on different SAP technologies and components.

Our presenters are from the renowned SAP security companies Akquinet, ERPSec, ESNC, Onapsis and Virtual Forge (in alphabetical order).

The challenge will also be flanked by two talks of SAP experts from the University of Applied Sciences in Münster and from SAP itself, as well as by a final joint expert Q&A round.

Participants are encouraged to reserve some additional time for the traditional SAP security networking dinner in the evening.