“…The privacy leakage can be modeled as a statistical inference and measured by the mutual information [1]- [3], [6], [7], divergence [4], differential privacy [9], or variance [8]. Depending on the application, the utility measure can be the expectation of cost [5], [6], [8], divergence [4], [7], or data rate [1], [3]. With the privacy and utility measures, the trade-off problem can be formulated as a worst case analysis [2], [4], [6]- [8] or zero-sum game [5].…”