I'm finishing my computer science bachelor's degree in about six months and will start my thesis in roughly two months. After that, I'm considering a master's degree in cybersecurity. I want to build practical projects to learn more and figure out whether security is the right path for me—possibly something similar to a Dropbox-style application with encryption and secure storage.
Java is currently my strongest language, so using it would let me focus on the project instead of learning new syntax. However, I'm also very interested in Rust, especially because of its memory safety, systems-programming capabilities, and growing use in security-related work. The downside is that I would need to spend time learning Rust before making significant progress. Combining Java and Rust in a microservice-based project is another possibility, though I'm unsure whether that would add unnecessary complexity.
Would Rust be a worthwhile choice for these projects, or should I stick with Java? How much should the project's goals determine the language, and would using a new language help or distract from learning cybersecurity concepts?
3 Answers
Security problems can happen in any language, so the most important thing is understanding secure design, threat modeling, authentication, authorization, encryption, and safe use of dependencies. Java can absolutely support a career in security. If you want to move toward low-level or systems security, learning C is still useful, and Rust is a strong modern alternative because it provides memory safety without a garbage collector.
Let the project decide the language, but don’t underestimate the value of learning something new. Rust is a useful choice if you want low-level programming, memory safety, or systems work, and concepts from Java will still carry over. You could start with a smaller Rust component rather than making the entire application a multi-language microservice system. That gives you practical Rust experience without letting language learning overwhelm the security goals.
Java is also worth keeping in your toolkit because there are many more entry-level jobs for it in many regions. Rust can be learned alongside your studies, but choose a project scope that leaves enough time to understand the security design rather than merely fighting the language.
For a Dropbox-like encrypted storage project, Java, Rust, and Go could all work well. The application will probably depend heavily on operating-system features, storage libraries, cryptographic libraries, and a usable interface, so the language itself won’t determine whether the design is secure.
This could also be a good opportunity to try Rust. Its compiler and type system can make errors more visible, and types such as Result and Option encourage explicit error handling. Just remember that Rust doesn’t automatically make cryptography or system architecture secure—you still need to use established libraries and carefully define the threat model.
That’s close to what I’m considering. I’m especially interested in low-level programming, but Java probably offers more job opportunities where I live. I enjoy learning languages, so the main concern is whether learning Rust at the same time will slow the project down too much.