|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/technical-security-in-sap/
课程评论：没有评论
**SAP技术安全课程总结** 本课程深入探讨SAP系统的技术安全层面，旨在帮助学员识别、理解并修复常见的技术漏洞。课程将详细介绍SAP安全中的关键领域，包括： * **密码与密码哈希：** 探讨密码管理和存储的安全性，以及如何防止弱密码和哈希泄露。 * **RFC（远程函数调用）安全：** 重点讲解RFC接口的安全性配置，包括ACL（访问控制列表）文件的正确使用和潜在风险。 * **系统日志：** 除了安全审计日志（Security Audit Log），课程还会介绍其他与安全相关的日志，并指导如何进行有效配置以监控系统活动。 * **WebDispatcher保护：** 详细说明如何 secured SAP WebDispatcher，以保护对外开放的Web应用。 * **SAP GUI安全：** 涵盖SAP图形用户界面（GUI）客户端的安全加固措施。 * **远程功能模块（Remote Enabled FMs）与UCON（User Comparison）安全：** 讨论远程功能模块的调用安全，以及UCON在用户管理中的安全应用。 **课程亮点：** * 通过实际案例演示常见技术漏洞及其修复方法。 * 深入解析ACL文件配置的重要性及不当配置的后果。 * 引导学员了解除安全审计日志之外的其他关键日志。 * 为SAP Basis顾问、SAP安全和授权顾问以及SAP系统所有者和经理提供宝贵的安全洞察和验证方法。 **目标学员：** * **SAP Basis顾问：** 增强对现有SAP系统安全方面的理解。 * **SAP安全和授权顾问：** 深入了解SAP安全的技术细节。 * **SAP系统所有者和经理：** 评估和提升SAP系统的整体安全性。 本课程将帮助您更好地理解SAP技术安全，有效防范潜在风险，确保您的SAP环境安全可靠。
DescriptionThis course covers the technical aspect of the SAP security. I will go through several well known technical vulnerabilities and I will demonstrate how they can be remediated and why they are dangerous. As part of this training I will cover also RFC and RFC gateway security. I will discuss the different ACL files and explain how they should be configured and what can happen if they are not.System logging is another topic. Security Audit log is not the only log that is relevant for security. Additional logs are needed and we will have a look what they are and how they should be configured.I also describe how the SAP WebDispatcher and the SAP GUI should be protected.Here are the highlights of the course: Section 1: Introduction Section 2: Passwords and Password Hashes Section 3: RFC Security Section 4: Security Logs Section 5: WebDispatcher Section 6: SAP GUI Section 7: Remote Enabled FMs and UCONWho this course is for:SAP Basis consultants - you will learn quite interesting security aspects of the things you already know.SAP Security and SAP Authorization consultants - you will learn the technical aspect of the SAP security. SAP system owner and SAP Manager - you most likely you believe that your SAP system is secure. This training will help you to verify it and also challenge your teams.
