On the Difficulties of Disclosure Prevention in Statistical Databases or The Case for Differential Privacy
Smooth sensitivity and sampling in private data analysis