Dr. Bao Gia Doan
Postdoctoral Research Fellow at UNSW Sydney
School of Computer Science and Engineering
UNSW Sydney
Sydney, Australia
I am a machine learning researcher and Postdoctoral Research Fellow. My research specialises in the robustness and trustworthiness of deep neural networks, from convolutional neural networks to large language models and transformer architectures.
My work in adversarial machine learning develops attack and defence mechanisms for threats including adversarial examples, data poisoning, model inversion, and backdoor attacks. It spans both machine learning for security and security for machine learning.
I also investigate privacy-preserving techniques such as differential privacy and federated learning. More recently, I have been building secure retrieval-augmented generation systems with open-source LLMs, addressing prompt injection, retrieval poisoning, hallucination mitigation, and trustworthy AI deployment.
Current position
At UNSW Sydney, I develop reliable retrieval-augmented generation systems that connect large language models with external knowledge bases. My work covers semantic retrieval, prompt engineering, vector embeddings, neural information retrieval, fine-tuning, evaluation, and the scalability of knowledge-intensive applications.
Previous positions
Before joining UNSW, I completed my PhD and worked as a Postdoctoral Research Fellow at the University of Adelaide, focusing on the robustness of deep neural networks. Before academia, I spent nearly four years at Intel Vietnam as a Senior Process and Equipment Engineer.
For a detailed overview, see my CV.
news
| Aug 07, 2026 | Our paper, “Didact: A Cross-Domain Capability Discovery System for Defence”, was accepted to CIKM 2026. |
|---|---|
| Aug 06, 2026 | Attended ADSTAR 2026 in Adelaide, Australia, from 4–6 August 2026. |
| Aug 01, 2026 | Serving as a Program Committee member for AAAI-27. |
| Oct 01, 2025 | Serving as a Program Committee member for ICLR 2026. |
| Jul 01, 2025 | Serving as a Program Committee member for the AAAI 2026 Special Track on AI Alignment. |
| Feb 01, 2025 | Serving on the Program Committee for NeurIPS. |
| Jan 01, 2025 | Serving on the Program Committee for ICML 2025. |
| Dec 15, 2024 | Our paper, “Bayesian Low-Rank LeArning (Bella): A Practical Approach to Bayesian Neural Networks”, was accepted to AAAI 2025. |
selected publications
- ACSAC
On the Credibility of Backdoor Attacks Against Object Detectors in the Physical WorldIn Annual Computer Security Applications Conference, 2024 - TIFS
TnT Attacks! Universal Naturalistic Adversarial Patches Against Deep Neural Network SystemsIEEE Transactions on Information Forensics and Security, 2022 - ICML
Bayesian Learning with Information Gain Provably Bounds Risk for a Robust Adversarial DefenseIn Proceedings of the 39th International Conference on Machine Learning, 2022