Practical privacy: the SuLQ framework
Revealing information while preserving privacy