Confidentiality in the Face of Pervasive Surveillance: A Threat Model and Problem Statement

   Abstract