Fundamental limits on the anonymity provided by the MIX techniqueDogan KesdoganDakshi Agrawalet al.2006S&P 2006