(1)
Dwork, C.; Naor, M. On the Difficulties of Disclosure Prevention in Statistical Databases or The Case for Differential Privacy. JPC 2010, 2.