Gerardo Canfora Corrado Aaron Visaggio Does enforcing anonymity mean decreasing data usefulness? 15-22 2008 QoP http://doi.acm.org/10.1145/1456362.1456367 conf/ccs/2008qop db/conf/ccs/qop2008.html#CanforaV08