tokens: If the entry traffic ( traffic between the client and guard ) and exit traffic ( traffic between the exit and server ) traverse over a common AS , that AS can apply traffic correlation attack and link the client to her destinations .