When Excessive Perturbation Goes Wrong and Why IPUMS-International Relies Instead on Sampling, Suppression, Swapping, and Other Minimally Harmful Methods to Protect Privacy of Census Microdata. - Lara Cleveland; Robert McCaa; Steven Ruggles; Matthew Sobek (Privacy in Statistical Databases, 2012)