Vision Language Model Interpretability with Concept Guided Decoding
Vision Language Models (VLMs) are challenging for the field of Deep Learning Interpretability given their billions of parameters and recurrence-based reasoning processes. Based on the Frame Representation Hypothesis from language models, we introduce a novel approach for interpretability for the visual domain, enabling systematic extraction and analysis of learned concepts. Our framework reveals inherent biases and vulnerabilities in VLMs, caused by lack of proper safety alignment between the visual and textual components. By combining our interpretability techniques with the known FigStep jailbreak method, we demonstrate model vulnerabilities, achieving an average 97.7% attack success rate in the Qwen2-VL and Llama 3.2 Vision models. This combination of interpretability analysis and security testing provides crucial insights for developing safer, more transparent models, offering a path toward more trustworthy visual AI systems.
Authors
- Ricardo Rezende Campos (ORCID: https://orcid.org/0000-0003-2266-8311)
- Gulpi Qorik Oktagalu Pratamasunu (ORCID: https://orcid.org/0000-0003-4410-316X)
- Pedro H. V. Valois (ORCID: https://orcid.org/0000-0002-4819-7688)
- Kazuhiro Fukui (ORCID: https://orcid.org/0000-0002-4201-1096)
- Dipesh Satav
Institutions
- University of Tsukuba (JP)
Publication Details
- Published
- 2025-08-18
- DOI
- https://doi.org/10.1109/icip55913.2025.11084299
- Primary Topic
- Semantic Web and Ontologies
- Type
- article
- Field-Weighted Citation Impact
- 0.00