No Code you shall use, malware you shall get

Slides: https://static.sched.com/hosted_files/owasp2023globalappsecwashin/c5/OWASP-Appsec-2023-DC-Amichai%20Shulman.pdf

Our research explores the possibility of spreading malware and launching supply chain attacks through the marketplace functionality of leading Low Code / No Code application development platforms. Low-Code/No-Code (LCNC) platforms are quickly becoming the go-to technology for building enterprise applications. As the usage of these platforms becomes widespread, they all adopt some type of code reuse and code sharing mechanism using a marketplace approach. Whether it’s Forge for Outsystems, AppSource for Microsoft PowerApps or the UiPath Marketplace - …

application application development applications attacks building code code reuse development enterprise low low code malware marketplace mechanism no code platforms quickly research reuse sharing supply supply chain supply chain attacks technology