Privacy Preservation in Location-Based Services: A Novel Metric and Attack Model