Haoran Jing

Do LLMs Know Their Vulnerable Scenarios?

This work shows that scenario-wrapped prompts activate internal scenario directions whose causal steering consistently reduces refusal scores, and proposes Concept2Scenario, a concept-based attribution framework for vulnerable scenario discovery that instantiates a broad concept space with a sparse autoencoder, translates the identified concepts into interpretable natural-language scenarios, and identifies synergistic scenario combinations through interaction attribution.