Vibhor Rastogi Michael Hay Gerome Miklau Dan Suciu Relationship privacy: output perturbation for queries with joins. 107-116 2009 PODS http://doi.acm.org/10.1145/1559795.1559812 conf/pods/2009 db/conf/pods/pods2009.html#RastogiHMS09