Generalizing data to provide anonymity when disclosing information (abstract)
Security-control methods for statistical databases: a comparative study