private data analysis via output perturbation - a rigorous approach to constructing sanitizers and privacy preserving algorithms .
Mechanism Design via Differential Privacy