A Purdue paper, on k-anonymity and differential privacy
Privacy-preserving data analysis