Sap Se

Sap Ag

Juergen Frank

Christoph Hofmann

Frank Oliver Hoffmann

Steven T Winkler

Cedric Hebert

Rouven Krebs

Mohammad Ashiqur Rahaman

Techniques are described for automatically incorporating lifecycle context information for a secured environment into an intrusion detection system monitoring the secured environment's operations. In one example, an indication of a potentially malicious action occurring in a secured environment monitored by an intrusion detection system is identified. A lifecycle-based context associated with a lifecycle operations manager (LOM) is accessed, where the LOM is responsible for managing lifecycle operations associated with components in the secured environment, and where the context stores information associated with lifecycle operations executed by the LOM. A determination is made as to whether the potentially malicious action associated with the indication is associated with information associated with an executed lifecycle operation stored in the context. In response to determining that a malicious action is associated with a lifecycle operation, a mitigation action associated with the potentially malicious action can be modified.

Intrusion detection system enrichment based on system lifecycle

Implementations of the present disclosure include methods, systems, and computer-readable storage mediums for receiving parameters defining a detection technique, an attack scenario, and detection logic, receiving configuration data that is specific to a target system that is to be monitored, providing an attack pattern based on the parameters and the configuration data, monitoring the target system based on the attack pattern and data provided by one or more logs of the target system, and selectively generating, based on monitoring, an alert indicating a potential end-to-end intrusion into the target system.

Attack pattern framework for monitoring enterprise information systems

Methods and apparatus, including computer systems and program products implementing a messaging protocol. The messaging protocol may be a messaging protocol for transporting a message across a messaging landscape in a collaborative network. Techniques include sending a message that is defined to include a structured message header with information related to at least one component from a set of components defined by a protocol, including protocol version information in a message such that a component of a messaging landscape can interpret the message based on the version information, defining a message as one of a class of messages, end-to-end acknowledgement for messages, and security for headers and payloads of messages.

Messaging protocol in enterprise applications

Growing community of inventors

Landenburg, Germany

Juergen Frank