Implications of Low Code Development on Mobile Application Security
Low-code development offers businesses a compelling way to develop software quickly and affordably. While there are inherent security risks that come with this approach, they can be mitigated with the right tools and strategies.
One of the most significant advantages of low-code development is its potential for cost savings. Sources explain that this approach reduces the need for large, specialised development teams. Hybrid frameworks, a popular low-code solution, enable the creation of apps for both iOS and Android from a single codebase, optimising both development time and cost.
However, this efficiency can come with security trade-offs. One concern is the increased attack surface presented by interpreted languages, commonly used in hybrid frameworks. Exposed source code and potential vulnerabilities in virtual machines (VMs) require specific security measures. To counter this, Runtime Application Self-Protection (RASP) can be implemented as a security layer within the application itself. RASP works to detect and prevent runtime attacks, even if vulnerabilities exist in the underlying code or VM.
Another challenge posed by smaller development teams is the potential lack of expertise in secure coding and configuration. The sources propose a multi-layered security approach to address this, incorporating automated security tooling and active threat monitoring. Automated tools can scan code for vulnerabilities. Meanwhile, threat monitoring systems provide constant vigilance. They not only identify suspicious activities but also enable dynamic responses to potential threats.
By combining RASP, automated security tools, and threat monitoring, businesses can leverage the efficiency and cost advantages of low-code development while building secure applications. Essentially, while low-code development might introduce new security considerations, these can be effectively managed with a proactive and layered approach to security.
MTD & MAPS Brochure | Mobile Endpoint Security Solutions | Contact us
Sign up for our newsletter | Zimperium
