Lillie Coney Joseph Lorenzo Hall Poorvi L. Vora David Wagner Towards a privacy measurement criterion for voting systems. 287-288 2005 conf/dgo/2005 DG.O http://doi.acm.org/10.1145/1065226.1065324 db/conf/dgo/dgo2005.html#ConeyHVW05