Reference models for network trace anonymization