Differential privacy: A survey of results
The tracker: a threat to statistical database security