A utility-driven surveillance approach to trade-off security and privacy