The Rise of In-House Training: Sourcing Rust Developers in Today’s Tech Landscape

Embracing Rust: Organizations Shift to Memory-Safe Languages

Introduction

In a bid to enhance software security and reduce memory-safety vulnerabilities, many organizations have started adopting memory-safe programming languages like Rust. While languages such as Go, Java, Kotlin, and Python serve well for various types of applications and services, Rust presents itself as a viable alternative for low-level programming, including operating systems, network software, and high-performance applications like video games. As the benefits of Rust become more apparent, organizations are increasingly supporting its use and working towards closing the talent gap through training initiatives. Google, in particular, has trained 500 engineers in Rust over the past year and has made its comprehensive training course available to the public. This shift towards Rust is being echoed by other industry giants like Microsoft, Cloudflare, and Dropbox.

Rust’s Rise and the Need for Training

Rust’s adoption is driven by its ability to address memory-safety vulnerabilities, which have long plagued software written in C and C++. For example, in the latest version of Android, memory-safety issues accounted for less than half of all vulnerabilities, thanks to the use of Rust. This improvement is significant considering memory-safety vulnerabilities previously accounted for about a third of Android vulnerabilities. Companies like Google and Microsoft have recognized the value of Rust and have started porting critical components of their systems to the language.

However, the shortage of skilled Rust developers poses a challenge to widespread adoption. Recognizing this, organizations have taken different approaches to address the issue. Google has developed an in-house training course, “Comprehensive Rust,” which has been made available to the public. This approach allows Google to focus on the specific features and tools relevant to their engineers’ success while creating a feedback loop to improve subsequent iterations of the training. Other companies, like Fortanix, rely on their developers to teach themselves Rust, leveraging their existing system programming skills in C and C++. The majority of developers who exclusively write Rust code at Fortanix had no prior Rust experience but were able to quickly adapt and learn the language.

Training Initiatives and Resources

To meet the growing demand for Rust expertise, numerous training materials and resources have been developed. Universities, bootcamps, and online courses now offer Rust training programs. Notably, Microsoft has released an introduction to Rust course and a 35-part YouTube video series catering to beginners. The Rust project itself offers a comprehensive book, “The Rust Programming Language”. The availability of these resources not only aids developers in expanding their Rust expertise but also raises the language’s profile within the industry.

Quantifying the Learning Curve

According to a survey conducted by Google, two-thirds of developers feel confident in writing Rust programs within two months of dedicated learning. This statistic showcases the language’s accessibility and the effectiveness of comprehensive training initiatives. The Android team at Google, after investing in creating a technical foundation and providing necessary training, has observed a significant reduction in memory-safety issues in subsequent versions of the operating system. Learning Rust has proven to be a strategic effort that improves software security while increasing productivity.

Editorial: The Importance of Memory-Safe Languages

The shift towards memory-safe languages like Rust signifies a growing recognition among organizations of the need for secure software development. Memory-safety vulnerabilities have been a persistent issue in the software landscape, leading to countless security breaches and system failures. By embracing Rust, organizations are taking a proactive approach to mitigating such vulnerabilities and strengthening their software systems.

Furthermore, memory-safe languages offer long-term benefits in terms of code maintainability, readability, and developer productivity. With memory management handled by the language itself, developers can focus more on implementing business logic and ensuring reliability, rather than troubleshooting memory-related errors. By investing in training initiatives, organizations are not only securing their codebase but also future-proofing their workforce.

Advice for Organizations and Developers

For organizations considering the adoption of Rust or other memory-safe languages, it is crucial to invest in training programs and resources. In-house training, as demonstrated by Google, allows organizations to tailor the content to their specific needs and foster a culture of expertise. Additionally, collaboration with industry experts and leveraging external training resources can provide a well-rounded learning experience for developers.

Developers interested in learning Rust should take advantage of the available training materials, such as books, online courses, and video series, to gain a comprehensive understanding of the language. Leveraging previous experience in system programming or languages like C and C++ can facilitate the learning process due to the shared concepts and fundamentals. The transition may be relatively easier for system programmers compared to application programmers, but with dedication and effort, developers from various backgrounds can become proficient in Rust.

Conclusion

As organizations increasingly recognize the importance of memory-safe languages like Rust, they are investing in training initiatives to bridge the talent gap and promote widespread adoption. The availability of comprehensive training materials and resources is facilitating the learning process for developers and raising the profile of Rust within the tech industry. The shift towards memory-safe languages not only improves software security but also has long-term benefits for code quality and developer productivity. By embracing Rust, organizations are paving the way for a more secure and reliable software landscape.