SAP security is still a dark world. Very little information can be found on the Net and almost every question related to security assessment of these applications keeps being unanswered. Besides, very few public presentations on the subject are available.