Melola Discovery

← Melola Discovery

Open access Jurnal SINTA 1

Exploring cookies vulnerabilities: awareness, privacy risks and exploitation

International Journal of Electrical and Computer Engineering (IJECE) · Vol. 15 No. 6 (2025)

DOI
10.11591/ijece.v15i6.pp5792-5803
ISSN
2722-2578, 2088-8708
Published
2025-12-01
Publisher
Institute of Advanced Engineering and Science
License
creativecommons.org/licenses/by-sa/4.0

Abstract

This study investigates cookie vulnerabilities, focusing on awareness, privacy risks, and exploitation techniques. We used a mixed-method approach that combines insights from a survey study and a systematic mapping study of 27 papers from online databases to comprehensively address the research topic. The results show a moderate level of user awareness about cookie-related privacy risks, with significant concerns over user tracking and profiling, identified in 88% of the reviewed studies. Key risks include sensitive data exposure, privacy and consent issues, targeted advertising, ineffective mitigation measures, and cyberattacks. Tracking via cookies, and especially third-party cookies were found to pose the greatest risk to end-users. Their widespread use for cross-site tracking and extensive fingerprinting often occurred without users’ awareness or explicit consent. These insights suggest the need for stricter privacy laws, better practices on cookies, and improved user awareness to mitigate concerning risks.

Collaboration network of the authors

9 authors · 16 co-authorship links · 11 across different organisations

Hover or tap a name to highlight its co-authors. Double-click to open the author's page.

  • International Islamic University Malaysia
  • University of Technology Malaysia
  • Universiti Teknologi MARA
  • National University of Malaysia
  • Abubakar Tafawa Balewa University
  • Different organisations
  • Same organisation
  • Affiliation unknown
  • Thicker line = more joint articles · bigger circle = more articles
Show as table
Co-authorOrganisationJoint articles
Mohd Nasir IsmailUniversiti Teknologi MARA1
Azizah HassanUniversity of Technology Malaysia1
Mohammad Nazir AhmadNational University of Malaysia1
Ab Razak Che HussinUniversity of Technology Malaysia1
Badamasi Imam Ya’uAbubakar Tafawa Balewa University1
Azlin NordinInternational Islamic University Malaysia1

Affiliations come from OpenAlex; journal OAI-PMH metadata carries none. Authors without an OpenAlex ID are matched by name, which can merge or split people.

This record comes from Crossref (what the publisher deposited), because the journal's own OAI-PMH endpoint could not be harvested.

Metadata source: Crossref API (cadangan, berdasarkan ISSN) https://api.crossref.org/journals/2088-8708/works, first harvested 27 Okt 2026, last seen 27 Okt 2026.
Metadata as oai_dc, converted from Crossref
<oai_dc:dc xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:oai_dc="http://www.openarchives.org/OAI/2.0/oai_dc/"><dc:title>Exploring cookies vulnerabilities: awareness, privacy risks and exploitation</dc:title><dc:creator>Hamzah, Nor Anisah Amir</dc:creator><dc:creator>Adnan, Anis Safiyyah</dc:creator><dc:creator>Salleh, Norsaremah</dc:creator><dc:description>&lt;jats:p&gt;This study investigates cookie vulnerabilities, focusing on awareness, privacy risks, and exploitation techniques. We used a mixed-method approach that combines insights from a survey study and a systematic mapping study of 27 papers from online databases to comprehensively address the research topic. The results show a moderate level of user awareness about cookie-related privacy risks, with significant concerns over user tracking and profiling, identified in 88% of the reviewed studies. Key risks include sensitive data exposure, privacy and consent issues, targeted advertising, ineffective mitigation measures, and cyberattacks. Tracking via cookies, and especially third-party cookies were found to pose the greatest risk to end-users. Their widespread use for cross-site tracking and extensive fingerprinting often occurred without users’ awareness or explicit consent. These insights suggest the need for stricter privacy laws, better practices on cookies, and improved user awareness to mitigate concerning risks.&lt;/jats:p&gt;</dc:description><dc:publisher>Institute of Advanced Engineering and Science</dc:publisher><dc:date>2025-12-01</dc:date><dc:type>info:eu-repo/semantics/article</dc:type><dc:format>application/pdf</dc:format><dc:identifier>https://doi.org/10.11591/ijece.v15i6.pp5792-5803</dc:identifier><dc:identifier>10.11591/ijece.v15i6.pp5792-5803</dc:identifier><dc:source>International Journal of Electrical and Computer Engineering (IJECE); Vol 15 No 6 (2025); 5792</dc:source><dc:source>2722-2578</dc:source><dc:source>2088-8708</dc:source><dc:relation>https://ijece.iaescore.com/index.php/IJECE/article/viewFile/39099/18563</dc:relation><dc:rights>http://creativecommons.org/licenses/by-sa/4.0</dc:rights></oai_dc:dc>