Managing Director at CAIBERP GmbH
20
Talks Delivered
19
Events Spoken At
9
Countries Visited
13
Years Speaking
20
Total Talks Given
Andreas Wiegenstein is engaged in SAP cyber security since 2003. He discovered quite a number of zero-day vulnerabilities in SAP software and supported development of a market leading static code analysis tool for the business programming language ABAP. He has spoken at more than 70 conferences world-wide about SAP security, including Black Hat, DeepSec, Hack In The Box, IT Defense, RSA, SAP TechEd and Troopers (alphabetical order). His current research is focused on SAP malware and supply chain attacks.
Areas of Expertise
Presentation Types
Audience Types
Discussing living off the land attacks for SAP -> the destructive power of an ABAP malware
4 hours of SAP security mechanisms, security features, risks and good practices.
Talk about the attack potential of an ABAP-based malware.
An overview of cool SAP vulnerabilities from the last 20 years of research together with my colleague Xu Jia.
SAP Security basics, risks and best practices
A (successful) demonstration of an attack from the SAP backend against an OT system.
Techniques to build vulnerabilities into software that can't be detected by static code scanners.
A talk about common risks in SAP landscapes
A talk about a MITM vulnerability related to SAP patch downloads.
A talk about the results of a statistical analysis of vulnerabilities in ABAP custom code on 200+ SAP installations.
An analysis of SAP attacks across a hosting provider. Together with Xu Jia.
A talk about a former 0-day that allowed to remote-control user sessions in SAP ABAP servers. Together with Xu Jia.
A proposal how to prevent data leakage caused by insecure ABAP applications at the code level.
Talk abour efficent attack vectors against SAP systems& defense capabilities.
An overview of common risks related to custom SAP development
Talk about the feasability of SQL Injection attacks against SAP Systems.
An overview of risks related to SAP's business programming language ABAP
Talk about the most common and critical security risks in SAP development.
A risk-oriented talk about vulnerabilities in SAP Frontend applications
Talk about common flaws in (SAP) Web application programming and some good practices for defense
