Marginal Release Under Local Differential Privacy
Calibrating Noise to Sensitivity in Private Data Analysis