
Full text loading...
Cybersecurity requirements for ensuring data security during research manuscript transit on the journal website require continuous improvement and adherence to best practices. Research data loss can have significant negative consequences across multiple dimensions including time and financial loss. The present research investigates security vulnerabilities during the real-time transit of manuscripts on a journal website.
Procedure: Website Access: The journal website was accessed, and manuscript components (main manuscript, figures, tables, graphical abstract, funding sources, suggested reviewer, and cover letter) were uploaded.
Operating system: Kali Linux, designed for penetration testing and security auditing was used.
Tools and software: Nmap (Version 7.95-2) for network discovery and security auditing. Nikto (2.5.0) for web server vulnerability scanning, and Tor (13.0.13) to anonymize web activities. Firefox (127.0.2) as the web browser, and VMware Workstation with Kali Rolling (2023.2 in a virtual environment.
Testing phase: Initial upload of the manuscript and supplementary materials. Upload of figures, tables, and graphical abstract. Inclusion of funding sources, suggested reviewers, and cover letter.
Data Collection and Analysis: Network traffic and potential vulnerabilities were monitored on Nmap, Nikto, and Tor.
Activities were conducted in the virtual environment of VMware Workstation for controlled and replicable setup.
Output measures: Identified and documented potential security gap or vulnerabilities leading to data theft during manuscript transit.
An Nmap scan of XXXXXXXX.com (IP: yyyyyyyyyyy) revealed six open ports: 80 (HTTP Apache), 443 (SSL/SMTP Exim), 587 (SMTP Exim), 993 (IMAPS), and 995 (POP3S). each server showed potential vulnerabilities. The scan took 86.15 seconds.
The results demonstrate a high risk of exposing sensitive information due to open ports, the presence of potentially outdated services, and the possibility of incomplete detection due to filtered ports pose a high risk of sensitive data during manuscript transit on the website of the journal.