{"id":"https://openalex.org/W7204206693","doi":"https://doi.org/10.48550/arxiv.2608.22624","title":"Rust for Secure Backend Development: A Critical Review and Extended Vulnerability Comparison with Node.js and Django","display_name":"Rust for Secure Backend Development: A Critical Review and Extended Vulnerability Comparison with Node.js and Django","publication_year":2026,"publication_date":"2026-08-23","ids":{"openalex":"https://openalex.org/W7204206693","doi":"https://doi.org/10.48550/arxiv.2608.22624"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2608.22624","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.22624","pdf_url":"https://arxiv.org/pdf/2608.22624","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2608.22624","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5108557931","display_name":"Md Zarzees Uddin Shah Chowdhury","orcid":"https://orcid.org/0009-0002-8081-0355","observed_orcids":["https://orcid.org/0009-0002-8081-0355"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chowdhury, Md Zarzees Uddin Shah","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5106016455","display_name":"Rabib Jahin Ibn Momin","orcid":"https://orcid.org/0009-0001-3607-3848","observed_orcids":["https://orcid.org/0009-0001-3607-3848"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Momin, Rabib Jahin Ibn","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5090604535","display_name":"Rifat Shahriyar","orcid":"https://orcid.org/0000-0001-9540-315X","observed_orcids":["https://orcid.org/0000-0001-9540-315X"]},"institutions":[{"id":"https://openalex.org/I183697816","display_name":"Bangladesh University of Engineering and Technology","ror":"https://ror.org/05a1qpv97","country_code":"BD","type":"education","lineage":["https://openalex.org/I183697816"]}],"countries":["BD"],"is_corresponding":false,"raw_author_name":"Shahriyar, Rifat","raw_affiliation_strings":["Bangladesh University of Engineering and Technology Department of Computer Science and Engineering Dhaka , Bangladesh"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Bangladesh University of Engineering and Technology Department of Computer Science and Engineering Dhaka , Bangladesh","institution_ids":["https://openalex.org/I183697816"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.8148999810218811,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.8148999810218811,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.13779999315738678,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10126","display_name":"Logic, programming, and type systems","score":0.02290000021457672,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/rust-programming-language","display_name":"Rust","score":0.9160000085830688},{"id":"https://openalex.org/keywords/software-vulnerabilities","display_name":"software vulnerabilities","score":0.7110000252723694},{"id":"https://openalex.org/keywords/memory-safety","display_name":"memory safety","score":0.781000018119812},{"id":"https://openalex.org/keywords/node-js","display_name":"Node.js","score":0.8080000281333923},{"id":"https://openalex.org/keywords/django","display_name":"Django","score":0.996999979019165},{"id":"https://openalex.org/keywords/vulnerability-classification","display_name":"vulnerability classification","score":0.5860000252723694},{"id":"https://openalex.org/keywords/owasp-top-10","display_name":"OWASP Top 10","score":0.9990000128746033},{"id":"https://openalex.org/keywords/use-after-free","display_name":"use-after-free","score":0.9779999852180481},{"id":"https://openalex.org/keywords/race-conditions","display_name":"race conditions","score":0.9950000047683716},{"id":"https://openalex.org/keywords/secure-development-lifecycle","display_name":"secure development lifecycle","score":0.7450000047683716}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6402999758720398},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6107000112533569},{"id":"https://openalex.org/C197781089","wikidata":"https://www.wikidata.org/wiki/Q575650","display_name":"Rust (programming language)","level":2,"score":0.6000000238418579},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5928999781608582},{"id":"https://openalex.org/C548217200","wikidata":"https://www.wikidata.org/wiki/Q251","display_name":"Java","level":2,"score":0.5376999974250793},{"id":"https://openalex.org/C193702766","wikidata":"https://www.wikidata.org/wiki/Q1414548","display_name":"Concurrency","level":2,"score":0.512499988079071},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.5044999718666077},{"id":"https://openalex.org/C28180684","wikidata":"https://www.wikidata.org/wiki/Q4080983","display_name":"Memory safety","level":3,"score":0.45910000801086426},{"id":"https://openalex.org/C172776598","wikidata":"https://www.wikidata.org/wiki/Q7943570","display_name":"Vulnerability management","level":4,"score":0.4438000023365021},{"id":"https://openalex.org/C77109596","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Application security","level":5,"score":0.4156000018119812},{"id":"https://openalex.org/C131275738","wikidata":"https://www.wikidata.org/wiki/Q7445023","display_name":"Security bug","level":5,"score":0.392300009727478},{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.39100000262260437},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3894999921321869},{"id":"https://openalex.org/C122944926","wikidata":"https://www.wikidata.org/wiki/Q209711","display_name":"Extreme programming","level":5,"score":0.3700000047683716},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.36469998955726624},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.35569998621940613},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.334199994802475},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.33079999685287476},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.3215000033378601},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.3190000057220459},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.29649999737739563},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.28439998626708984},{"id":"https://openalex.org/C114869243","wikidata":"https://www.wikidata.org/wiki/Q133735","display_name":"Security through obscurity","level":5,"score":0.2728999853134155},{"id":"https://openalex.org/C35578498","wikidata":"https://www.wikidata.org/wiki/Q193424","display_name":"Web service","level":2,"score":0.2676999866962433},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.26510000228881836},{"id":"https://openalex.org/C199519371","wikidata":"https://www.wikidata.org/wiki/Q942695","display_name":"Source lines of code","level":3,"score":0.2540000081062317}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2608.22624","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.22624","pdf_url":"https://arxiv.org/pdf/2608.22624","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2608.22624","doi":"https://doi.org/10.48550/arxiv.2608.22624","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2608.22624","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2608.22624","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.22624","pdf_url":"https://arxiv.org/pdf/2608.22624","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7204206693.pdf","grobid_xml":"https://content.openalex.org/works/W7204206693.grobid-xml"},"referenced_works_count":7,"referenced_works":["https://openalex.org/W2329930013","https://openalex.org/W3034030180","https://openalex.org/W3202751128","https://openalex.org/W4313303769","https://openalex.org/W6898867109","https://openalex.org/W6917535489","https://openalex.org/W6950241105"],"related_works":["https://openalex.org/W7117159372","https://openalex.org/W4386802779","https://openalex.org/W6959906636","https://openalex.org/W3010592047","https://openalex.org/W3212191335","https://openalex.org/W4328028823","https://openalex.org/W4416131494","https://openalex.org/W4385234256","https://openalex.org/W4408566099","https://openalex.org/W7044505642"],"abstract_inverted_index":{"The":[0],"Rust":[1,75,124,180],"programming":[2],"language":[3],"is":[4],"widely":[5],"credited":[6],"with":[7],"eliminating":[8],"entire":[9],"classes":[10],"of":[11,20,36,69,74,94,111,123],"memory-safety":[12],"and":[13,46,67,79,89,108,127,135,150],"concurrency":[14],"vulnerabilities,":[15],"but":[16],"the":[17,53,65,70,82,90,109,130,163,175],"security":[18,41],"implications":[19],"adopting":[21],"it":[22],"in":[23,43,50,182],"practice":[24],"extend":[25],"well":[26],"beyond":[27],"memory":[28],"safety.":[29],"This":[30],"paper":[31],"presents":[32],"a":[33,51,104,112],"critical":[34],"review":[35],"prior":[37],"work":[38],"on":[39,191],"Rust's":[40,158],"posture":[42],"industrial":[44],"settings,":[45],"extends":[47],"that":[48,157,179],"analysis":[49],"direction":[52],"original":[54,121],"study":[55],"did":[56],"not":[57],"cover:":[58],"backend":[59,168],"web":[60,183],"development.":[61],"We":[62,117],"first":[63],"assess":[64],"strengths":[66],"limitations":[68],"existing":[71],"vulnerability":[72],"classification":[73,133],"against":[76,125],"C,":[77],"C++,":[78],"Java":[80],"under":[81],"SANS":[83],"Top":[84,87],"25,":[85],"OWASP":[86],"10,":[88],"19":[91],"Deadly":[92],"Sins":[93],"Software":[95],"Security":[96],"frameworks,":[97],"identifying":[98],"gaps":[99],"including":[100],"limited":[101],"empirical":[102],"validation,":[103],"small":[105],"interview":[106],"sample,":[107],"absence":[110],"secure":[113],"development":[114],"lifecycle":[115],"discussion.":[116],"then":[118],"contribute":[119],"an":[120],"comparison":[122],"Node.js":[126],"Django":[128],"using":[129],"same":[131],"three-level":[132],"(Rare":[134],"Difficult,":[136],"Safeguarded,":[137],"Unprotected),":[138],"supported":[139],"by":[140],"side-by-side":[141],"code":[142],"experiments":[143],"for":[144],"out-of-bounds":[145],"writes":[146],"(CWE-787),":[147],"use-after-free":[148],"(CWE-416),":[149],"race":[151],"conditions":[152],"(CWE-362).":[153],"Our":[154],"results":[155],"indicate":[156],"compile-time":[159],"guarantees":[160],"dominate":[161],"at":[162,174],"systems":[164],"layer,":[165,177],"while":[166],"managed":[167],"frameworks":[169],"offer":[170],"stronger":[171],"built-in":[172],"defenses":[173],"application":[176],"suggesting":[178],"adoption":[181],"contexts":[184],"requires":[185],"complementary":[186],"safeguards":[187],"rather":[188],"than":[189],"reliance":[190],"language-level":[192],"safety":[193],"alone.":[194]},"counts_by_year":[],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2026-08-26T00:00:00"}