Analyzing Graphs with Node Differential Privacy
Practical privacy: the SuLQ framework