As the digital attack surface continues to evolve, it’s crucial to stay ahead of the curve in terms of cybersecurity. That’s why we are excited to share with you the advancements we’ve made to our platform to better protect our customers from cyber threats. In this blog series, we will continuously highlight the newest features and updates that make the smarterSec Security Platform even more powerful for safeguarding your digital assets. From enhanced threat detection to improved user experience, our improvements will help our customers to stay one step ahead of potential security breaches. Whether you’re a current user or just interested in learning more about smarterSec, this blog series is for you. Your feedback is more than welcome. So, join us as we take a closer look at the latest innovations for the smarterSec Security Platform.
If you want to dive deeper into the functionalities of the smarterSec Security Platform, you can find more information here: smarterSec Security Platform
With release 5.2 we have been mainly focusing on improvements of our smarterSec Security Platform. This release lays the foundation for better data handling within the platform, allowing us to push out more data heavy features in the future. A major change to the underlying result data structure has been implemented.
New features & improvements
Improvements & Fixes
Major changes to the underlying result data structure
Testcase results now carry unique signatures. That means, findings can be updated in place instead of being retracked from scratch (internal platform process).
Testcase results now also support backwards-compatible column mappings, so historic data maps cleanly onto the newer Testcase signatures.
We’ve also extended the findings data model. With this change we soon can implement a new feature to accept the risk of a single finding directly, without needing to build out a full value list first. Less overhead for one-off decisions. However, with the same level of transparency.
On top of that, this release again brings solid performance boosts to the smarterSec Security Platform.
Value list analysis runs faster, result and delta fetching is quicker, and we’ve cut a significant amount of RAM overhead by being smarter about how resources are held and released.
Same capabilities, less weight.
Further improvements are:
Value List Trend Accuracy
– Value list entries are now only counted as valid after their creation date, so the trend chart correctly shows decreasing findings over time.
Import/Export for Authorization Check Framework
– Added a technical option to import and export actions and segregation of duties from the authorization check framework.
Content
As always, we have updated all Testcases to check for the latest releases of components, kernels, and security patches for all available target types.
SAP Netweaver AS ABAP
For this target type, we have added 2 new authorization checks and 1 new SOD check.
Additionally we have updated 17 Testcases.
SAP Cloud Connector
For this target type, we have updated 2 Testcases.
SAP HANA
For this target type, we have updated 1 Testcase.
We will update you on our new platform features regularly here in this blog – stay tuned and give us a follow on LinkedIn to not miss any further updates!
Related topics: Managed Security Service for the smarterSec Security Platform // smarterSec Security