A privacy threat analysis framework: supporting the elicitation and fulfillment of privacy requirements
On the limits of steganography