Sap Se

Sap Ag

Anne Jacobi

Florian Kraemer

Kathrin Nos

Thorsten Menke

Jona Hassforther

Omar-Alexander Al-Hujaj

Jens Baumgart

Volker Guzman

Thanh-Phong Lam

Marco Rodeck

Thomas Kunz

Harish Mehta

Hartwig Seifert

Stefan Rossmanith

Nan Zhang

Bertram Vielsack

Stefan A Baeuerle

Uwe Schlarb

Bernhard Thimmel

Ruediger Karl

Matthias Lehr

Karsten Fanghänel

Michael Schmitt

Bjoern Brencher

Johannes Haselberger

Knut Thies

Sven Krüppel-Berndt

Björn Brencher

Ingo Kober

A transfer of master data is executed in a backend computing system. The master data includes user data and system data. The transfer of master data includes receiving user data associated with a particular user identifier in the backend computing system, transferring the received user data to an event stream processor, receiving system data associated with a particular log providing computing system in the backend computing system, transferring the received user data to the event stream processor, and executing a transfer of log data associated with logs of computing systems connected to the backend computing system.

System and user context in enterprise threat detection

A selection of data types is defined from available log data for an evaluation of events associated with an entity. One or more evaluations associated with the entity are defined and reference data is generated from the selection of data types based on the one or more defined evaluations. The one or more evaluations are grouped into a pattern. A three dimensional (3D) score diversity diagram visualization is initialized for display in a graphical user interface, where a point representing the entity in the visualization is localized in 3D space at a coordinate based on two-dimensional (2D) coordinates in a 2D coordinate system of a centroid of the calculated area of a polygon placed to into the 2D coordinate system and defined by the values of each evaluation associated with the entity.

Anomaly detection in enterprise threat detection

A Content Service executing in a cloud-computing-based Cloud Platform receives enterprise threat detection (ETD) Content transmitted from an ETD Content Development System (CDS) as a publication of the ETD Content from the ETD CDS. The received ETD Content is stored into a Content Management System (CMS). A determination is made of a registered Client ETD System for which the ETD Content is relevant. The ETD Content is published to the registered Client ETD System.

Distributing cloud-computing platform content to enterprise threat detection systems

A log processing job executing on a log producing computing system is initiated for processing log data associated with the log producing computing system. Log entries are determined to be available for processing. At least one instance of a Log Extractor Factory, Reader, and Transformation component are instantiated for reading and transforming the log data. Read log data is transformed into a common semantic format as transformed log data and transmitted in real-time to a Streaming Component for storage in an Enterprise Threat Detection (ETD) System. A recovery point is stored with a recovery timestamp indicating a next log entry in the log data to process.

Providing semantic connectivity between a java application server and enterprise threat detection system using a J2EE data

Implementations of the present disclosure include executing a business application on a server device, the business application executing a service based on a base plurality of inputs, accessing a first service variant based on the service, generating a first plurality of input fields based on the first service variant, the first plurality of input fields corresponding to a first plurality of inputs, the first plurality of inputs being a sub-set of the base plurality of inputs, and executing the service based on the first plurality of inputs that is input using the first plurality of input fields.

Service variants for enterprise services

A system may include reception of a definition of an extension field to be added to a business object node, generation of metadata for a data type enhancement object associated with the extension field, and generation of an ABAP dictionary proxy object based on the data type enhancement object, wherein the ABAP dictionary proxy object describes the extension field in a sub-structure of a first field of the ABAP dictionary proxy object.

Field extensibility using generic boxed components

Growing community of inventors

Wiesloch, Germany

Anne Jacobi