Karr, A. F., J. Feng, X. Lin, J. P. Reiter, A. P. Sanil, and S.S. Young. "Data dissemination and disclosure limitation in a world without microdata: A risk-utility framework for remote access analysis servers." Statistical Science 20 (2005): 163-177.