activity
20192026
most citedFebruus: Input Purification Defense Against Trojan Attacks on Deep Neural Network Systems

250 citations · 444 across the 12 of their papers we have counts for

collaborators

12 papers

cs.CL2026

Didact: A Cross-Domain Capability Discovery System for Defence

Aarya Bodhankar, Aditya Joshi, Bao Gia Doan +3

Policymakers in defence and defence-aligned sectors must monitor rapidly evolving research alongside sector priorities relevant to operational and strategic needs. In practice, the…

cs.CL2026

A Benchmark Construction and Evaluation Framework for Specialist Domains: Case Study on Defense-related Documents

Bao Gia Doan, Aditya Joshi, Pantelis Elinas +4

RAG-based question-answering (QA) in specialist domains faces a cold-start problem: lack of evaluative benchmarks and absence of labeled data for post-training. We present DoRA (Do…

cs.CR2024

On the Credibility of Backdoor Attacks Against Object Detectors in the Physical World

Bao Gia Doan, Dang Quang Nguyen, Callum Lindquist +7

Object detectors are vulnerable to backdoor attacks. In contrast to classifiers, detectors possess unique characteristics, architecturally and in task execution; often operating in…

cs.LG2024

Bayesian Low-Rank LeArning (Bella): A Practical Approach to Bayesian Neural Networks

Bao Gia Doan, Afshar Shamsi, Xiao-Yu Guo +6

Computational complexity of Bayesian learning is impeding its adoption in practical, large-scale tasks. Despite demonstrations of significant merits such as improved robustness and…

cs.CR2024★ 1 cited

Bayesian Learned Models Can Detect Adversarial Malware For Free

Bao Gia Doan, Dang Quang Nguyen, Paul Montague +6

The vulnerability of machine learning-based malware detectors to adversarial attacks has prompted the need for robust solutions. Adversarial training is an effective method but is…

cs.CR2023

Feature-Space Bayesian Adversarial Learning Improved Malware Detector Robustness

Bao Gia Doan, Shuiqiao Yang, Paul Montague +6

We present a new algorithm to train a robust malware detector. Modern malware detectors rely on machine learning algorithms. Now, the adversarial objective is to devise alterations…

cs.LG2022★ 2 cited

Bayesian Learning with Information Gain Provably Bounds Risk for a Robust Adversarial Defense

Bao Gia Doan, Ehsan Abbasnejad, Javen Qinfeng Shi +1

We present a new algorithm to learn a deep neural network model robust against adversarial attacks. Previous algorithms demonstrate an adversarially trained Bayesian Neural Network…

cs.CR2022★ 43 cited

Transferable Graph Backdoor Attack

Shuiqiao Yang, Bao Gia Doan, Paul Montague +5

Graph Neural Networks (GNNs) have achieved tremendous success in many graph mining tasks benefitting from the message passing strategy that fuses the local structure and node featu…

cs.CV2021

TnT Attacks! Universal Naturalistic Adversarial Patches Against Deep Neural Network Systems

Bao Gia Doan, Minhui Xue, Shiqing Ma +2

Deep neural networks are vulnerable to attacks from adversarial inputs and, more recently, Trojans to misguide or hijack the model's decision. We expose the existence of an intrigu…

cs.CR2020★ 133 cited

Backdoor Attacks and Countermeasures on Deep Learning: A Comprehensive Review

Yansong Gao, Bao Gia Doan, Zhi Zhang +5

This work provides the community with a timely comprehensive review of backdoor attacks and countermeasures on deep learning. According to the attacker's capability and affected st…

cs.CR2019★ 15 cited

Design and Evaluation of a Multi-Domain Trojan Detection Method on Deep Neural Networks

Yansong Gao, Yeonjae Kim, Bao Gia Doan +5

This work corroborates a run-time Trojan detection method exploiting STRong Intentional Perturbation of inputs, is a multi-domain Trojan detection defence across Vision, Text and A…

cs.CR2019★ 250 cited

Februus: Input Purification Defense Against Trojan Attacks on Deep Neural Network Systems

Bao Gia Doan, Ehsan Abbasnejad, Damith C. Ranasinghe

We propose Februus; a new idea to neutralize highly potent and insidious Trojan attacks on Deep Neural Network (DNN) systems at run-time. In Trojan attacks, an adversary activates…