How much is enough? choosing ε for differential privacy
Privacy, accuracy, and consistency too: a holistic solution to contingency table release