Alberto Ceselli Ernesto Damiani Sabrina De Capitani di Vimercati Sushil Jajodia Stefano Paraboschi Pierangela Samarati Modeling and assessing inference exposure in encrypted databases. 119-152 2005 8 ACM Trans. Inf. Syst. Secur. 1 http://doi.acm.org/10.1145/1053283.1053289 db/journals/tissec/tissec8.html#CeselliDVJPS05