Security of Rust Applications

The book "Security of Rust Applications" is a comprehensive guide to creating reliable and secure software in the Rust language. Unlike many languages, Rust already at the compiler level prevents entire classes of memory-related vulnerabilities. However, this does not eliminate the need to understand how to properly design secure systems, work with external data, encryption, and multithreading.

The book is divided into three logical parts:

• Fundamentals of Security in Rust: ownership, borrowing, and lifetimes; why Rust protects against use-after-free, double-free, and data races; safe work with unsafe code.
• Practical Application Protection: handling user input, protection against SQL injection, XSS, and CSRF; safe work with files, networking, and serialization; dependency auditing and vulnerability management via cargo-audit.
• Cryptography and Advanced Techniques: using the ring and rust-crypto libraries; implementing authentication, JWT, password hashing (Argon2); safe multithreading and state isolation.

Each chapter contains real code examples, analysis of typical mistakes, and practical advice on preventing them. You will learn how to conduct code reviews with a focus on security, set up CI/CD for automatic vulnerability detection, and write tests to verify security.

Who this book is for:

• Rust developers looking to deepen their knowledge in security.
• DevOps and architects responsible for infrastructure security.
• Students and professionals transitioning to Rust from other languages (C++, Python, Java).
• Anyone who wants to write code resistant to attacks and vulnerabilities.

After reading, you will be able to:

• Design secure application architecture in Rust.
• Effectively use the type system to prevent errors.
• Integrate encryption and secure data storage.
• Conduct code and dependency audits for vulnerabilities.
• Understand OWASP recommendations and how they apply to Rust.

The book is suitable both for beginners who have already mastered the basics of Rust and for experienced developers who want to systematize their knowledge of security. All examples are relevant for the latest stable versions of Rust (edition 2021 and later).