Trust Me, I’m a Robot: Can we trust RPA with our most guarded secrets?

No ratings

Presented at BSides Las Vegas 2022 by

Nimrod Coppenhagen

Robotic Process Automation (RPA) is one of the hottest technologies in the industry today, rapidly gaining traction as larger enterprises look to speed up their business processes by automating mundane and repetitive office tasks. This trend has significantly grown during COVID-19. Any RPA solution, most of which are Windows applications, running in an enterprise would have to use a large pool of credentials to do its job. From usernames and passwords of unattended robots to read/write access to enterprise backbone applications, such as: financial, HR, IT, Sales and Marketing and more. This talk is about our research on an automation platform from one of the largest RPA vendors in the market. We will analyze the RPA platform while discussing some of the vulnerabilities we found and offer mitigations.