Joan Feigenbaum Aaron Johnson Paul F. Syverson Probabilistic analysis of onion routing in a black-box model. 1-10 2007 WPES http://doi.acm.org/10.1145/1314333.1314335 conf/wpes/2007 db/conf/wpes/wpes2007.html#FeigenbaumJS07