An Operational Approach to Information Leakage
Calibrating Noise to Sensitivity in Private Data Analysis