Toward a Statistical Framework for Source Anonymity in Sensor Networks