C. Dwork and M. Naor, “On the Difficulties of Disclosure Prevention in Statistical Databases or The Case for Differential Privacy”, JPC, vol. 2, no. 1, Sep. 2010.