On the Difficulties of Disclosure Prevention in Statistical Databases or The Case for Differential Privacy
Revealing information while preserving privacy