Frank McSherry Privacy integrated queries: an extensible platform for privacy-preserving data analysis. 19-30 2009 SIGMOD Conference http://doi.acm.org/10.1145/1559845.1559850 conf/sigmod/2009 db/conf/sigmod/sigmod2009.html#McSherry09