Formal approaches to information hiding: An analysis of interactive systems, statistical disclosure control, and refinement of specifications