With the proliferation of Internet, ERP systems like all the domains of Information Technology have known an important evolution. This final thesis project is a study about the evolution of ERP systems, more precisely about their migration to the Web giving birth to a new generation of systems: the Web-Based or Web-enabled ERP systems. This migration to the Web is justified by the difficulty of making possible the communication between partner’s legacy systems and the organizations’ ERP systems. A historical evolution of these systems is presented in order to understand the reasons that lead vendors to adopt the Web Service Technology. Based on different studies, the main technologies such as Web services, Service-Oriented Architecture and Web Application server are also presented. From an interpretative research approach mySAP ERP has been chosen as a case study. This Master’s thesis has been led into AIRBUS France Company within the framework of the SAP Customer Competence Center (SAPCCC) Web site project. The project is aimed at re-building the SAPCCC Web site. The new characteristic of the Web site is to make it accessible by all AIRBUS partners working with SAP applications. To make the Web site accessible by the partners from their own applications located on their own platforms the development has been done thanks to mySAP ERP which is an ERP using the Web service technology. Finally, this thesis presents a comparative study between traditional ERP systems and the new generation of Web-based ERP systems.

Main goal of this thesis is analyzing potential security risks of the SAP NetWeaver platform and identifying various vulnerabilities, that are results of poor system configuration, incorrect segregation of duties or insufficient patch management. Methodology for platform evaluation is defined by vulnerabilities, security requirements and controls will be created.