Upload
alexander-nevidimov
View
195
Download
0
Tags:
Embed Size (px)
Citation preview
Boufahja Dhiaeddine Supervised by Dr.Li Keqin & Pr.Bassem Hemidi
Graduation Project “Application Scenarios for Security
Validation & Testing”
2012-2013
© 2012 SAP AG. All rights reserved. 22
Agenda
Introduction
• Problematic
Analysis & Requirements
Design
Realization Hello SAP Netweaver Cloud! Roles User Experience CSRF Attack
Conclusion
3
Introduction
© 2012 SAP AG. All rights reserved. 4
Introduction
A complete solution
of Security Validation
& Testing
© 2012 SAP AG. All rights reserved. 5
SPaCIoS Partners
© 2012 SAP AG. All rights reserved. 6
Introduction
Pervasive Retail Application
SPaCIoS
Administration
ProfessorsStudents
© 2012 SAP AG. All rights reserved. 7
Approach
Analysis of needs
Design
RealizationTests & Validation
8
Click icon to add picture
Analysis & Requirements
© 2012 SAP AG. All rights reserved. 9
Methodology - SCRUM
10
Click icon to add picture
Design
© 2012 SAP AG. All rights reserved. 11
What’s in each solution?
Software
Quickly address the most urgent business processes
Content
SAP-supported best practices, templates, and tools make solution adoption easier
Enablement
Guides and educational material speed end-user adoption
Service
Fixed scope and price provide maximum predictability and lower risk
SAP Rapid Deployment solutions
© 2012 SAP AG. All rights reserved. 12
Analysis of needs
Security
Integrity
Non-functional
needs
Ergonomics
For administrator
• real time management of Students and Professors demands
• management of schedules
• management of users
For simple users
• making demands to the administration online
• see schedules
Functionnal Needs
© 2012 SAP AG. All rights reserved. 13
Software Scope Overview
Employee & Organizational Data
Analytics Data
Salary & Compensation Data
SA
P H
CM
Ad
d-o
n
SAP ERP HCM
BizX SuiteHCM core
Organization Management
Personnel Administration
Payroll
SAP NetWeaver Process Integration
© 2012 SAP AG. All rights reserved. 14
In the system
Key process flows covered Initial transfer of basic personnel administration organizational data Transfer of changed data records following a process-driven event, such as new hire, rehire,
termination, transfer, change of personal employee data (name and address, for example), change of e-mail address and user ID, and new manager
SuccessFactors Business Execution
SuccessFactors Business Execution
SAP ERP HCM SAP NetWeaver Process
Integration
Administraion and
Organization
Employee & Organizational Data Employee Data
SA
P H
CM
Add
-on
<WSDL> <WSDL>
SAP ERP HCM SAP NetWeaver Process
Integration
Administration and
Organization
Employee & Organizational Data Employee Data
SA
P H
CM
Add
-on
15
Click icon to add picture
Realization
© 2012 SAP AG. All rights reserved. 16
In the system
Key process flows covered Relevant salary and pay-grade data is transferred from SAP ERP HCM to SuccessFactors Business
Execution Changed compensation data such as salary change, lump-sum payment, or long-term incentive is
transferred from SuccessFactors to SAP ERP HCM
SuccessFactors Business Execution
SAP ERP HCM SAP NetWeaver Process
Integration
Administration and Payroll
Current Salary DataEmployee Data
SA
P H
CM
Add
-on
Compensation Allocations
<WSDL> <WSDL>
17
Conclusion
© 2012 SAP AG. All rights reserved. 18
Solution activation and confirmation
Implementation of options Knowledge transfer to key
users Master data load Testing of solution Switch to QA and production
Go live in as little as 5 weeks
Start RunDeploy
Expectations
1 3
Project management Kick-off workshop participation Scoping workshop Preparing technical
infrastructure
End user training Data migration Hand over of solution Go-Live Post go-live support and
activities
2
Results
Mutually-approved options selected
Working SAP system
Successful rollout and adoption Configuration documentation
Superior support to ensure smooth functioning
© 2012 SAP AG. All rights reserved. 19
Engineered Services for Rapid Deployment Solutions
Your path to Go-Live: fast, efficiently and at predictable cost Fixed-price Implementation Services Pre-defined Project Methodology Ready-to-use Accelerators
Start RunDeploy1 32
Project management Kick-off workshop participation Select options workshop Preparing technical infrastructure
Accelerators / Deliverables Service delivery model Pre-delivery requirements and
checklist Work breakdown structure (WBS) Consulting delivery guide Solution details Solution summary Scoping questionnaire and options Kick-off presentation Software requirements Solution Manager template
Solution activation and confirmation Implementation of options Knowledge transfer to key users Master data load Testing of solution Switch to QA and production
Accelerators / Deliverables Quick guide Business process documentation Best-Practices content
(pre-configuration) Scoping questionnaire and options Configuration guides Test plans and scripts
End user training Data migration Hand over of solution Go-Live Post go-live support and activities
Accelerators / Deliverables Training Materials –
Business process documentation, process-flow recordings etc.
Delivery acceptance forms
© 2012 SAP AG. All rights reserved. 20
Configuration Guide
Scoping Questionnaire
Kickoff Workshop
Project Schedule
Support PortalCheck Lists
Implementation methodology
Start RunDeploy1 32
© 2012 SAP AG. All rights reserved. 21
Project plan and timelines
Prepare Project
Kick off workshop
Select Options
Check Installation
SAP involvement Customer involvement
Start RunDeploy1 32
Activate Solution
Confirm Solution
Acceptance Testing
Train Key Users
Set up Customer Data
Transport
End-user Training and Organisation Change Management
Prepare Production
Project Sign-off &Support
Note: This slide represents a typical deployment. Exact details may differ according to solution.
© 2012 SAP AG. All rights reserved. 22
Project team: SAP
SAP Project Manager Serves as a central contact person for SAP, from
project initiation to going live and support Responsible for the coordination of SAP tasks and
project management assistance with the customer’s project manager.
SAP Consultants Responsible for implementation of the agreed upon
scope for the rapid-deployment solution
© 2012 SAP AG. All rights reserved. 23
Project team: customer
Leading Project Manager Serves as a central contact person from the customer, from
project initiation to going live and support On your side: responsible for functional and commercial
project management, coordination of customer tasks, overall project controlling and updates to the project steering committee
Basis staff Especially responsible for the installation and
administration of the SAP system landscapes
Functional department staff / key users Responsible for workshops, questions from SAP,
end-user training, and possibly as a power user for simple configurations
Specialized Staff (Optional) Responsible for further specialized areas such as
customization and configuration
Thank you for your attention