SAP, Credit Cards, and the Bird that Talks Too Much

Presented at Black Hat USA 2014, Aug. 7, 2014, 3:30 p.m. (60 minutes).

SAP applications build the business backbone of the largest organizations in the world. In this presentation, exploits will be shown manipulating a business process to extract money, critical payment information, and credit card data out of the business backbone. Follow the bird and enjoy tweets of data that will interest you.

Presenters:

• Ertunga Arsal - ESNC
  Ertunga Arsal is the founder of ESNC, a company specialized in SAP security products. ESNC developed the first product to automate the complete security and patching process for SAP. Previously, he worked with Tech Data (Nasdaq:TECD) for many years as a security consultant and was responsible for SAP and applications security of the EMEA region. Being part of the incident response team, he commonly took the lead on numerous investigations. Ertunga is an active security researcher and already in 2013, SAP has released more than 75 security patches for the vulnerabilities he reported. Ertunga also lectures on Systems and Network Security at Sabanci University for postgraduates.

Links:

• https://www.blackhat.com/us-14/archives.html#sap-credit-cards-and-the-bird-that-talks-too-much
• https://www.youtube.com/watch?v=UuSu3vUG2TU
• https://www.blackhat.com/docs/us-14/materials/us-14-Arsal-SAP-Credit-Cards-And-The-Bird-That-Talks-Too-Much.pdf

Similar Presentations:

• DeepSec 2014 „Do you want to know more?“ / SAP BusinessObjects Attacks: Espionage and Poisoning of Business Intelligence platforms
• Black Hat Asia 2014 / SAP, Credit Cards, and the Bird That Knows Too Much
• DeepSec 2018 „I like to mov &6974,%bx“ / ERP Security: Assess, Exploit and Defend SAP Platforms