Presentations, Tutorials & Lectures
In this area, you can find links to presentations and lectures members of our team gave at congresses or workshops.
Sebastian Schinzel at "OWASP AppSec Germany 2009 Conference"
Sichere Entwicklung und gängige Schwachstellen in eigenentwickelten SAP-Web-Anwendungen ("Secure development and common vulnerabilities in self-developed SAP-Web-Applications", in German language)
Data in SAP-Systems process business critical information with very high protection requirements. Those systems are increasingly accessible via Web interfaces. SAP offers several frameworks for developing own Web applications based on the SAP Web Application Server (Web AS). Widely frameworks are Business Server Pages (BSP) and Web Dynpro ABAP.

In this talk, Sebastian Schinzel presents how to develop secure Web applications with BSP or Web Dynpro ABAP. He also shows how developers can avoid common Web vulnerabilities such as Cross-Site Scripting, SQL Injection and Cross-Site Request Forgery in SAP Web applications.
CEO Dr. Markus Schumacher at "ROOTS - Recent Object-Oriented Trends", Bergen, Norway, April 2006
Security Patterns - From Threat Models to Pattern Mining
CEO Dr. Markus Schumacher at "OOP Objekt-orientiertes Programmieren", Munich, Germany, January 2006
Understanding Security with Patterns
CTO Andreas Wiegenstein at "Deutschland sicher im Netz", Munich & Darmstadt, Germany, October 2005
Ladendiebstahl leicht gemacht
Lecture by CEO Dr. Markus Schumacher, Universität Trier, summer session 2005
IT Sicherheit - Probleme, Beispiele, Lösungen
CTO Andreas Wiegenstein at SAP TechEd 2004, San Diego & Munich, October 2004
Writing Secure Web Applications
CEO Dr. Markus Schumacher at FGSEC Fachtagung "Präsentation der Studie zum Stand der Sicherheit der in der Schweiz eingesetzten SAP-Systeme", Zurich, Switzerland, April 2004
SAP Security - Secure Business in Open Environments