Paul Khoury

Lead the SAP Threat Modeling content work as well as to define SAP security requirements. I work in the central product security expert team for SAP owning the security strategy for SAP. I assess the security level for SAP products before shipment and assist developers and architects in finding best in class security solutions (for SAP On Premise, On Demand and On Device offerings). I contribute to the promotion of security latest news and solutions and ease knowledge transfer to SAP developers worldwide.

I was the governor for the SAP Security Patch Day process, from its pilot phase until its official communication to SAP Customers in 09/2010. In addition I was working with Security Researchers and some of SAP CERT Customers departments to find new solutions and enhance even more the security notes quality.

I contributed to the definition of the SAP Security curriculum, in its format definition (security courses) to its content (material of the training). This training has been and still is being taught to SAP developers and architects worldwide. I lead the activity of eHealth in the context of the EU funded project SERENITY. I authored various International Conference and Journal Publications in the area of Security Patterns and Security Engineering in addition to several Patents.

Security Patterns, Security and Access Control Policies, Integration of Security Solutions, Security Protocols