Information hiding, anonymity and privacy: a modular approach
Dominic Hughes, Vitaly Shmatikov · Journal of Computer Security · 2004
We propose a new specification framework for information hiding properties such as anonymity and privacy. The framework is based on the concept of a function view, which is a concise representation of the attacker's partial knowledge about a function