Riverbed: Enforcing User-Defined Privacy Constraints in Distributed Web Services [pdf]
mickens.seas.harvard.edu