A statistical framework for differential privacy
Calibrating Noise to Sensitivity in Private Data Analysis