Expected Harm: Rethinking Safety Evaluation of (Mis)Aligned LLMs
This work introduces Expected Harm, a metric that weights the severity of a jailbreak by its execution likelihood, modeled as a function of execution cost, and demonstrates that this miscalibration creates a vulnerability that increases the attack success rate of existing jailbreaks by up to $2\times.