Privacy: Theory meets Practice on the Map
Smooth sensitivity and sampling in private data analysis