Han Chen Pasquale Malacaria Quantifying maximal loss of anonymity in protocols. 206-217 2009 ASIACCS http://doi.acm.org/10.1145/1533057.1533087 conf/ccs/2009asia db/conf/ccs/asiaccs2009.html#ChenM09