Search papers, labs, and topics across Lattice.
This paper introduces MMDiff, a multimodal model-diffing framework that leverages sparse autoencoders (SAEs) to isolate and control features in multimodal large language models (MLLMs). By comparing a base-LM SAE with its multimodal-adapted version, MMDiff enables feature isolation, task-specific detection, and feature-level control, demonstrating significant impacts on performance metrics such as a 12% degradation in spatial tasks and a 24% reduction in attack success rates for multimodal safety. The findings highlight that multimodal SAEs can be effectively utilized not only for interpretability but also for enhancing the safety and capability of MLLMs.
MMDiff reveals that multimodal SAEs can be powerful tools for both auditing and steering MLLM behavior, achieving up to 24% reduction in safety attack success rates without compromising performance on visual question answering.
Multimodal Large Language Models (MLLMs) exhibit strong visual understanding, yet the internal features that cause these behaviors remain difficult to identify, audit, or control. While applicable to post-hoc inspection, hidden states that are decomposed into interpretable feature directions using sparse autoencoders (SAEs) neither readily isolate which features are changed by multimodal training, nor are they directly useful for targeted control. We introduce MMDiff, a multimodal model-diffing framework that trains multimodal SAEs and turns them into feature-level interfaces for discovering and controlling multimodal behavior. MMDiff supports three uses: (i) feature isolation, by diffing a base-LM SAE against its multimodal-adapted counterpart to identify features altered by multimodal training; (ii) task-specific feature detection, via per-token contrastive firing analysis that isolates causal features; and (iii) feature-level control, by causally removing or steering the discovered feature directions. We train multimodal SAEs for three MLLM families, LLaVA-MORE, PaliGemma 2, and InternVL3.5, and evaluate on visual-spatial understanding, multimodal safety, and OCR. MMDiff discovers sparse, causally specific features whose removal selectively degrades target behaviors by an average of 12% on spatial tasks and 17% on OCR, and reduces attack success rate by 24% on multimodal safety attacks, with no impact on VQA performance. Steering these features improves spatial and OCR accuracy by +3.6% and +1.8% on average over a standard single-layer steering baseline. These results show that multimodal SAEs can serve not only as interpretability tools, but as mechanisms for auditing, steering, and controlling MLLMs behavior toward safer and more capable generations.
Microsoft Research