On the Difficulties of Disclosure Prevention in Statistical Databases or The Case for Differential Privacy
Achieving k-Anonymity Privacy Protection Using Generalization and Suppression