Three major defense classes

Batching and pooling:
Delay messages to get a large batch, and mix them together to hinder the adversary from linking Alice to the message that comes out.
Padding:
Provide decoy traffic as well as normal traffic.
Dispersal:
Reduce the chance that the adversary sees enough of the network to complete his attack.