Includes supplementary material: sn.pub/extras
Roger Dingledine
Information Web security anonymity anonymization architecture distributed information systems identity internet services intrusion detection network security networks privacy private information retrieval trust unobservability