Filippo Del Tedesco David Sands A User Model for Information Erasure SECCO 2009 16-30 http://dx.doi.org/10.4204/EPTCS.7.2 journals/corr/abs-0910-4420 db/series/eptcs/eptcs7.html#abs-0910-4056