"Low-code" and "no-code" are terms used to describe software development approaches that enable the creation of applications with minimal or no traditional coding. These paradigms are designed to make application development more accessible to a wider range of people, including those who are not professional developers. However, the security implications of these programming paradigms have not been researched in detail.
This project aims to experimentally analyze low-code and no-code environments' security advantages and shortcomings. It will focus on environments that enable the development and operation of software in open environments such as web or mobile applications.
- https://owasp.org/www-project-top-10-low-code-no-code-security-risks/ (no longer available)
- https://link.springer.com/chapter/10.1007/978-3-031-16947-2_1
- https://www.sciencedirect.com/science/article/abs/pii/S259011842200082X