Research management applications (RMA) are widely used in clinical research environments to collect, transmit, analyze, and store sensitive data. This data is so valuable making RMAs susceptible to security threats. This analysis, analyzes RMAs' security, focusing on Research Electronic Data Capture (REDCap) as an example. We explore the strengths and vulnerabilities within RMAs by evaluating the architecture, data flow, and security features. We identify and assess potential risks using the MITRE ATT\&CK framework and STRIDE model. We assess REDCap's defenses against common attack vectors focusing on security to provide confidentiality, integrity, availability, non-repudiation, and authentication. We conclude by proposing recommendations for enhancing the security of RMAs, ensuring that critical research data remains protected without compromising usability. This research aims to contribute towards a more secure framework for managing sensitive information in research-intensive environments.

翻译：研究管理应用程序(RMA)在临床研究环境中被广泛用于收集、传输、分析和存储敏感数据。这些数据极具价值，使得RMA容易受到安全威胁。本研究以Research Electronic Data Capture(REDCap)为例，重点分析了RMA的安全性。我们通过评估其架构、数据流和安全特性，探讨了RMA的优势与脆弱性。运用MITRE ATT&CK框架和STRIDE模型，我们识别并评估了潜在风险。我们重点评估了REDCap针对常见攻击向量的防御能力，重点关注保障机密性、完整性、可用性、不可否认性和认证性的安全措施。最后，我们提出了增强RMA安全性的建议，旨在确保关键研究数据得到保护的同时不影响可用性。本研究致力于为研究密集型环境中敏感信息的管理构建更安全的框架做出贡献。