Calibrating Noise to Sensitivity in Private Data Analysis
Security-control methods for statistical databases: a comparative study