View in EDS PDF Full Text

Exploring cookies vulnerabilities: awareness, privacy risks and exploitation.

Saved in:
Bibliographic Details
Title: Exploring cookies vulnerabilities: awareness, privacy risks and exploitation.
Authors: Hamzah, Nor Anisah Amir1 anisah.amir@live.iium.edu.my, Adnan, Anis Safiyyah1 safiyyah.adnan@live.iium.edu.my, Salleh, Norsaremah1 norsaremah@iium.edu.my
Source: International Journal of Electrical & Computer Engineering (2088-8708). Dec2025, Vol. 15 Issue 6, p5792-5803. 12p.
Subjects: Cookies (Computer science), Data privacy, Scientific observation, Computer security vulnerabilities, Data security failures, Computer hacking, Consent (Law)
Abstract: This study investigates cookie vulnerabilities, focusing on awareness, privacy risks, and exploitation techniques. We used a mixed-method approach that combines insights from a survey study and a systematic mapping study of 27 papers from online databases to comprehensively address the research topic. The results show a moderate level of user awareness about cookie-related privacy risks, with significant concerns over user tracking and profiling, identified in 88% of the reviewed studies. Key risks include sensitive data exposure, privacy and consent issues, targeted advertising, ineffective mitigation measures, and cyberattacks. Tracking via cookies, and especially third-party cookies were found to pose the greatest risk to end-users. Their widespread use for cross-site tracking and extensive fingerprinting often occurred without users' awareness or explicit consent. These insights suggest the need for stricter privacy laws, better practices on cookies, and improved user awareness to mitigate concerning risks. [ABSTRACT FROM AUTHOR]
Copyright of International Journal of Electrical & Computer Engineering (2088-8708) is the property of Institute of Advanced Engineering & Science and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)
Database: Engineering Source
FullText Links:
  – Type: pdflink
Text:
  Availability: 0
Header DbId: egs
DbLabel: Engineering Source
An: 190950310
AccessLevel: 6
PubType: Academic Journal
PubTypeId: academicJournal
PreciseRelevancyScore: 0
IllustrationInfo
Items – Name: Title
  Label: Title
  Group: Ti
  Data: Exploring cookies vulnerabilities: awareness, privacy risks and exploitation.
– Name: Author
  Label: Authors
  Group: Au
  Data: <searchLink fieldCode="AR" term="%22Hamzah%2C+Nor+Anisah+Amir%22">Hamzah, Nor Anisah Amir</searchLink><relatesTo>1</relatesTo><i> anisah.amir@live.iium.edu.my</i><br /><searchLink fieldCode="AR" term="%22Adnan%2C+Anis+Safiyyah%22">Adnan, Anis Safiyyah</searchLink><relatesTo>1</relatesTo><i> safiyyah.adnan@live.iium.edu.my</i><br /><searchLink fieldCode="AR" term="%22Salleh%2C+Norsaremah%22">Salleh, Norsaremah</searchLink><relatesTo>1</relatesTo><i> norsaremah@iium.edu.my</i>
– Name: TitleSource
  Label: Source
  Group: Src
  Data: <searchLink fieldCode="JN" term="%22International+Journal+of+Electrical+%26+Computer+Engineering+%282088-8708%29%22">International Journal of Electrical & Computer Engineering (2088-8708)</searchLink>. Dec2025, Vol. 15 Issue 6, p5792-5803. 12p.
– Name: Subject
  Label: Subjects
  Group: Su
  Data: <searchLink fieldCode="DE" term="%22Cookies+%28Computer+science%29%22">Cookies (Computer science)</searchLink><br /><searchLink fieldCode="DE" term="%22Data+privacy%22">Data privacy</searchLink><br /><searchLink fieldCode="DE" term="%22Scientific+observation%22">Scientific observation</searchLink><br /><searchLink fieldCode="DE" term="%22Computer+security+vulnerabilities%22">Computer security vulnerabilities</searchLink><br /><searchLink fieldCode="DE" term="%22Data+security+failures%22">Data security failures</searchLink><br /><searchLink fieldCode="DE" term="%22Computer+hacking%22">Computer hacking</searchLink><br /><searchLink fieldCode="DE" term="%22Consent+%28Law%29%22">Consent (Law)</searchLink>
– Name: Abstract
  Label: Abstract
  Group: Ab
  Data: This study investigates cookie vulnerabilities, focusing on awareness, privacy risks, and exploitation techniques. We used a mixed-method approach that combines insights from a survey study and a systematic mapping study of 27 papers from online databases to comprehensively address the research topic. The results show a moderate level of user awareness about cookie-related privacy risks, with significant concerns over user tracking and profiling, identified in 88% of the reviewed studies. Key risks include sensitive data exposure, privacy and consent issues, targeted advertising, ineffective mitigation measures, and cyberattacks. Tracking via cookies, and especially third-party cookies were found to pose the greatest risk to end-users. Their widespread use for cross-site tracking and extensive fingerprinting often occurred without users' awareness or explicit consent. These insights suggest the need for stricter privacy laws, better practices on cookies, and improved user awareness to mitigate concerning risks. [ABSTRACT FROM AUTHOR]
– Name: AbstractSuppliedCopyright
  Label:
  Group: Ab
  Data: <i>Copyright of International Journal of Electrical & Computer Engineering (2088-8708) is the property of Institute of Advanced Engineering & Science and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract.</i> (Copyright applies to all Abstracts.)
PLink https://search.ebscohost.com/login.aspx?direct=true&site=eds-live&db=egs&AN=190950310
RecordInfo BibRecord:
  BibEntity:
    Identifiers:
      – Type: doi
        Value: 10.11591/ijece.v15i6.pp5792-5803
    Languages:
      – Code: eng
        Text: English
    PhysicalDescription:
      Pagination:
        PageCount: 12
        StartPage: 5792
    Subjects:
      – SubjectFull: Cookies (Computer science)
        Type: general
      – SubjectFull: Data privacy
        Type: general
      – SubjectFull: Scientific observation
        Type: general
      – SubjectFull: Computer security vulnerabilities
        Type: general
      – SubjectFull: Data security failures
        Type: general
      – SubjectFull: Computer hacking
        Type: general
      – SubjectFull: Consent (Law)
        Type: general
    Titles:
      – TitleFull: Exploring cookies vulnerabilities: awareness, privacy risks and exploitation.
        Type: main
  BibRelationships:
    HasContributorRelationships:
      – PersonEntity:
          Name:
            NameFull: Hamzah, Nor Anisah Amir
      – PersonEntity:
          Name:
            NameFull: Adnan, Anis Safiyyah
      – PersonEntity:
          Name:
            NameFull: Salleh, Norsaremah
    IsPartOfRelationships:
      – BibEntity:
          Dates:
            – D: 01
              M: 12
              Text: Dec2025
              Type: published
              Y: 2025
          Identifiers:
            – Type: issn-print
              Value: 20888708
          Numbering:
            – Type: volume
              Value: 15
            – Type: issue
              Value: 6
          Titles:
            – TitleFull: International Journal of Electrical & Computer Engineering (2088-8708)
              Type: main
ResultId 1