I am fortunate to supervise a brilliant group of researchers.

Postdocs

• Andrew Cullen (2019– ). Certified robustness of machine learning.
• Neil Marchant (2021– ). Robustness, privacy, and generalisation in machine learning.
• Ying Zhao (2024– ). Differential privacy.

PhD students

• Jiacheng Zhang. (w Feng Liu 2023– ). Trustworthy AI.
• Maria Bulychev. (w Neil Marchant 2024– ). Watermarking GenAI and trustworthy AI.
• Wenqi Yan. (w Thuan Pham, Toby Murray 2024– ). Software fuzzing with LLMs.
• Jiani Xie. (w Andrew Cullen 2025– ). Security of automatic speech recognition.

PhD students—Completed

• Zhuoqun (Calvin) Huang. (w Olya Ohrimenko, Neil Marchant 2021–25). Certified robustness for discrete data → Quant at Jane Street
• Shijie Liu. (w Sarah Erfani, Paul Montague, Andrew Cullen 2021-25). Certified robustness at training time → Postdoc at Univ Melbourne
• Jiankai Jin. (w Olya Ohrimenko 2021–25). Systems security of differential privacy.
• Jun Wang. (w Trevor Cohn 2020-25). Adversarial learning for NLP → Postdoc (Applied Scientist) at Amazon
• Guoxin Sun. (w Tansu Alpcan, Seyit Camtepe 2020–24). Adversarial learning/game theory for autonomous systems → Data scientist at Proa
• Ruihan Zhang (w Tim Miller, Kris Ehinger 2019–24). Explainable AI → Postdoc at the State Grid Corporation of China
• Malinga Perera (w Renata Borovica-Gajic 2018–23). Self-driving databases → Software engineer at Amazon Web Services
• Bastian Oetomo (w Renata Borovica-Gajic 2018–23). Multi-armed bandits for database index selection → Postdoc at Univ Melbourne
• Dongge Liu (w Toby Murray, Thuan Pham, Gidon Ernst at LMU Munich 2018–22). Software fuzzing with machine learning → Open-Source Security at Google
• Neil Marchant (w Beka Steorts at Duke, Aurore Delaigle 2016–20). Bayesian record linkage, adaptive importance sampling for efficient evaluation → Postdoc at Univ Melbourne
• Leyla Roohi (w Vanessa Teague 2017–19). Secure storage and private querying for telecommunications metadata → Postdoc at Univ Melbourne → Analytics at National Australia Bank
• Yuan Li (w Trevor Cohn 2015–19). Crowd sourcing, Bayesian optimisation, NLP → Postdoc at Univ Melbourne
• Lingjuan Lyu (w Marimuthu Palaniswami 2016–18). Privacy in distributed sensing → Postdoc at the ANU → Head of Privacy and Security, Sony AI
• Safiollah Heidari (w Raj Buyya 2015–18). Distributed graph processing → Founder of NeuroPhyte
• Xunyun Liu (w Raj Buyya, Rodrigo Calheiros 2015–18). Stream computing → Assistant Prof at NUDT, China
• Zay Aye - CompSci (w Rao Kotagiri 2014–18). Learning distance metrics → Postdoc at Univ Melbourne (Infrastructure Engineering)
• Yamuna Kankanige (w James Bailey 2015–18). Predicting liver transplant outcomes with Austin Health → Senior Data Scientist, Peter MacCallum Cancer Centre
• Maryam Fanaeepour - CompSci (w Lars Kulik, Egemen Tanin 2014–17). Location data privacy → Postdoc at Duke University → Specialist Manager, Data Science, Privacy, Trust at Deloitte
• Jiazhen He - CompSci (w James Bailey, Rui Zhang 2014–17). Education analytics and MOOCs → Postdoc at Univ Melbourne → Associate Principal AI Scientist, AstraZeneca
• Zuhe Zhang - Maths & Stats (w Sanming Zhou 2014–17). Differential privacy in Bayesian statistics → Data Scientist at ANZ Bank → Data Scientist at Officeworks

Other Alumni

• Aref Miri Rekavandi (psotdoc 2023–24). Certified robustness → Postdoc, University of Oxford
• Amila Silva (postdoc 2023–23). Multi-modal learning for human-AI teaming → Machine Learning Engineer, Canva
• Ni Ding (postdoc 2020-23). Information theory for privacy → Lecturer, Univ Auckland, New Zealand
• Sandamal Weerasinghe (postdoc 2019–21). Adversarial machine learning → Energy and Forecasting Analyst, ZEN Energy (startup)
• Roei Gelbhart (student 2019–21). Robustness in machine learning → Applied Scientist, Amazon, Haifa.
• Chang Xu (postdoc 2020–21). Adversarial learning for NLP → Data Scientist, News Corp, Sydney.
• Shuo Zhou (postdoc w Tordesillas, Bailey, Bondell 2019–20). Complex networks in materials science, cybersecurity.
• Thibaut Lienart (postdoc 2018–19). Adversarial machine learning → Associate, Alan Turing Institute
• Yi Han (postdoc 2016–19). Adversarial reinforcement learning → Postdoc at Melbourne
• Shen Wang (postdoc 2016–18). Probabilistic programming, databases, record linkage.
• Ben Fish (medium-term PhD visitor 2016) → Postdoc at MSR Montréal
• Francesco Aldà (medium-term PhD visitor 2016) → Data Scientist at SAP, Germany
• Akshay Balsubramani (MSR PhD intern 2012) → Postdoc at Stanford
• Emanuele Coviello (MSR PhD intern 2012) → Founder/CEO at Keevio
• Sahand Negahban (MSR PhD intern 2011) → Assistant Prof at Yale Statistics
• Duo Zhang (MSR PhD intern 2011) → Software Engineer at Twitter
• Bo Zhao (MSR PhD intern 2011) → Researcher at Microsoft Research