Alexander Polyakov

Alexander Polyakov is the founder of ERPScan and President of the EAS-SEC.org project. Recognized as an R&D professional and Entrepreneur of the year, his expertise covers the security of enterprise business-critical software like ERP, CRM, SRM and industry specific solutions for Oil and Gas, Manufacturing, Retail and Banking; as well as other verticals developed by enterprise software companies such as SAP and Oracle. He has received numerous accolades and published over 100 vulnerabilities.

Alexander has also published a book about Oracle Database security, numerous white papers, such the award winning annual "SAP Security in Figures”; plus surveys devoted to information security research in SAP.

Alexander has presented his research on SAP and ERP security at more than 50 conferences and trainings in 20+ countries in all continents. He has also held trainings for the CISOs of Fortune 2000 companies, and for SAP SE itself.

He is the author of numerous whitepapers and surveys devoted to information security research in SAP like "SAP Security in figures." Alexander was invited to speak and train at international conferences such as BlackHat, RSA, HITB and 30 others around globe as well as in internal workshops for SAP and Fortune 500 companies.

Articles from Alexander Polyakov

SAP Mobile Infrastructure Security [Updated 2019]

August 23, 2019

SAP, like any other large vendor, is evolving towards greater mobility and providing access to its applications from different devices located anywhere in th

Learn More

SAP Security for CISO part 14: SOD [Updated 2019]

August 19, 2019

Numerous articles covering different aspects of SAP Security mostly regarding vulnerabilities and risks paved the way for today's discussion on how we can pr

Learn More

SAP Security for Beginners Part 15 - SAP Code Security

November 6, 2017

The next topic to deal with after Segregation of Duties is SAP Code Security. It is a relatively new area of SAP Cybersecurity comparing to SoD, for example.

Learn More

SAP SECURITY FOR CISO: SAP Attacks and Incidents

June 30, 2017

If you read this series, you already know enough about SAP ERP Security to discover a real impact of having insecure SAP implementation. Recently, Crowd Rese

Learn More

SAP HANA Platform Security

April 10, 2017

After we embraced the security of SAP ABAP and Java platforms, now it's SAP HANA Platform's turn. You will learn the most important notes about its security,

Learn More

SAP NetWeaver J2EE Platform Security

March 27, 2017

In the previous article, we discussed SAP NetWeaver ABAP Platform and its vulnerabilities. Today's topic is the J2EE platform, its architecture, vulnerabilit

Learn More

SAP ABAP Platform Security

March 7, 2017

From the previous articles of SAP Security for CISO series (especially SAP Risks), you reviewed many examples of potential attacks on these systems. Now it i

Learn More

SAP Risks - Fraud

February 20, 2017

Welcome to the latest part of SAP Risks. After we finished with Espionage and Sabotage, let's eat the last piece of this "sweet cake" dubbed Fraud. In my opi

Learn More

SAP Risks: Sabotage

February 8, 2017

I hope you did not forget the previous article about espionage. Just in case, I would like to remind you once again that traditional IT security deals with C

Learn More

The Cybersecurity Market 2016 and future predictions: How to Deal with 100s of Solutions

December 14, 2016

I hope you haven't forgotten my previous article about the cyber security market and companies it consists of. Now we are going to pursue the topic. So, we h

Learn More

Midstream Security for Oil

November 21, 2016

I hope you enjoyed the previous parts of Oil and Gas Cyber Security series (Upstream Cyber Security and Oil and Gas Cyber Security 101). Today we will talk a

Learn More

SAP Risks — Espionage

October 19, 2016

Now when you learned what SAP is and its difference from traditional systems, let's talk about the most common risks related to attacks against SAP systems.

Learn More