HEIDELBERG, Germany--(BUSINESS WIRE)--Aiming to expand the quality assurance of SAP® software enhancements, SAP AG (NYSE: SAP) has now licensed the testing software CodeProfiler, of the ABAP™ programming language security specialist Virtual Forge. This tool is the first solution on the market for static analysis of ABAP applications with a specific focus on security and compliance tests. CodeProfiler offers SAP customers that have developed their own ABAP code extensive quality assurance. Even development divisions of SAP employ this tool amongst other quality assurance tools. Based on data and control flow analysis, CodeProfiler delivers reliable test results within a short period of time. The tool analyzes up to 5.000 line of source code per second. Thus, even tests of extensive software applications are possible anytime.

Dr. Gunter Bitz, responsible for Quality Assurance at SAP, exemplifies: “CodeProfiler is a valuable tool for quality assurance. This is why SAP internally employs it ancillary to SAP’s own tool ‘Checkman’. With CodeProfiler, SAP customers can systematically verify the entire ABAP source code of their self-developed code on security and compliance weaknesses. For security tests, complete coverage is important, as an intruder can infiltrate a system through one single weak point. This tool is an excellent supplement to existing security testing methods available today.”

SAP Executive Board Member Gerhard Oswald amends: “Security is important to us and to our customers. It’s good to see that our trusted partner Virtual Forge provides a tool for security test automation. Now all our customers can establish a baseline security level in their ABAP code.”

Virtual Forge GmbH is a leading specialist in Application Security and has extensive expertise in ABAP Security and Compliance. Located in Heidelberg, Virtual Forge GmbH has been working with SAP in this area for many years. Andreas Wiegenstein, Chief Technology Officer at Virtual Forge GmbH, says: “We systematically analyze ABAP applications and, together with our partners, offer tailored solutions. This is necessary, as the compliance of the business processes always depend on whether weaknesses occur in the software system. CodeProfiler accommodates this by determining the risk in the operational context of the SAP application. For example, our tool systematically examines authorization checks, access to sensitive tables or usage of critical functions in the standard SAP software.”

PRINTABLE PHOTO FOOTAGE:

http://www.virtualforge.de/press/Andreas_Wiegenstein_Virtual_Forge_CTO.jpg

http://www.virtualforge.de/press/Virtual_Forge_Logo.jpg