Shortfacts - April 2017

Abap drain

The European Patent Office has granted Virtual Forge a patent for a new method for data leak prevention (DLP) in SAP systems. The new method, which is based on Virtual Forge's CodeProfiler for Abap security software, identifies the outflow channels of sensitive data in the Abap source code.

The so-called static DLP analysis from Virtual Forge therefore starts much earlier than other methods that only monitor SAP data outflows at the possible exit points from the company network. It proactively detects the points in the Abap source code that attackers could use to extract sensitive data from the SAP systems, either by fraudulent intent or accidentally by employees. As a result, customers receive a test report with the identified vulnerabilities in the SAP source code as well as specific recommendations for action to eliminate them. "SAP applications are increasingly becoming the focus of hackers, which increases the likelihood of attacks," says the patent specification from the European Patent Office in Munich (EPO). "Virtual Forge's DLP method follows an innovative approach that offers unique added value for the security analysis of business applications." Dr. Markus Schumacher, Managing Director of Virtual Forge, adds: "The granting of the European patent shows how innovative our DLP approach is for SAP security. It protects an important component of our offering and thus strengthens our market position."