Mechanism Design via Differential Privacy
Calibrating Noise to Sensitivity in Private Data Analysis