Evaluating and Improving Static Application Security Testing Tools for Rust
Researchers evaluated six popular Rust Static Application Security Testing (SAST) tools using 320 real-world vulnerabilities. The study found high false positive rates, especially for memory and concurrency issues. To improve SAST accuracy, a new LLM-assisted framework called TRUST was proposed. TRUST tested the existing tools and discovered 46 faults across six tools, with 17 confirmed by developers.