Introduction
In today presentation we will be discussing Cookies ,which are
essential tools that enhance our online experiences by
remembering information like login details and preferences.
Since their introduction in 1994, they have played a crucial role in
session management and user customization. However, their
functionality also poses security risks, as they can be exploited by
hackers for unauthorized access and can track user activity
across websites, raising privacy concerns. This presentation will
explore the definition,roles,types,history and recommendations
associated with cookies and emphasize best practices for
securing them, helping us navigate the digital world safely.
01
Cookies
Defination
•Small pieces of data stored on a user’s
device by a web browser.
•Used for session management,
personalization, and tracking.
How cookies works ?
Why Secure Cookie Management?
- To Protects user data and enhances trust.
- To Prevents unauthorized access and attacks..
Role of
02 cookies
in web
In web security, cookies are involved in:
❑ Authentication: Cookies store session tokens that
validate user identity, making them a target for attackers
aiming to hijack sessions.
❑ Data Integrity: Ensuring cookies are transmitted
securely (e.g., using HTTPS) is vital to prevent
unauthorized access and manipulation.
❑ Privacy Concerns: Cookies can track user behavior
across sites, raising issues regarding user consent and
data protection.
03
History of cookies
Types of
04 Cookies
You can enter a subtitle
here if you need it
Session cookis
Session cookies are temporary and
created when visiting a website.
They disappear once the browser is
closed. These cookies help manage
user sessions by tracking activity
across pages. They keep users
logged in and enable actions like
adding items to a shopping cart
without losing choices.
Persistent cookies are designed to stay on
Persistent cookies a user's device for a predetermined period,
even after the browser is closed. These
cookies are set by the server with an
expiration date that can vary from days to
years. Their primary function is to store user
preferences, login details, and other
settings across multiple visits to a website.
Third-party cookies are generated by
domains other than the one the user is
presently on. They are commonly used
by advertisers and analytics providers to
Third party cookies follow users across several websites,
allowing for targeted advertising and
data collecting. they also pose serious
privacy concerns because they allow for
comprehensive surveillance of user
behavior without explicit agreement.
Secure and HTTP Only cookies are
intended to improve the security of cookie
Secure and data.
These cookies can only be sent via secure
http-only HTTPS connections, protecting sensitive
information from interception during
transfer.
05
Recommendations for
Developers
Recommendations for Developers
o Limit Cookie Lifespan:
Set appropriate expiration dates for cookies to minimize the risk of session
hijacking.
o Use Strong Encryption:
Encrypt sensitive data stored in cookies to protect against unauthorized
access.
o Regular Security Audits:
Conduct periodic reviews of cookie management practices and security
measures to identify and address vulnerabilities.
o User Education:
Inform users about cookie policies and provide options for managing their
cookie preferences
06
conclusion
conclusion
Getting to the end of our presentation we find that
cookies play a vital role in web applications by
facilitating authentication, personalization, and user
experience. However, they also present significant
security and privacy challenges. By implementing best
practices for secure cookie management and adhering
to legal regulations, developers can mitigate risks
associated with cookies.
References
● https://developer.mozilla.org/en-
US/docs/Web/HTTP/Guides/Cookies
● https://www.kaspersky.com/resource-
center/definitions/cookies
● https://digitalcommons.usf.edu/cookies
●
