A Methodology for Formalizing Model-Inversion Attacks
Calibrating Noise to Sensitivity in Private Data Analysis