T2-AT-018MEDIUM
Semantic Field Manipulation
T2 · Semantic & Linguistic Evasion →Risk score175
RatingMedium
Procedures10
Severity
Mechanism
Exploits overlapping semantic fields between benign and restricted domains. Chemistry/cooking, medicine/drugs, security/hacking, sports/violence — each pair shares vocabulary and concepts where the benign member is permitted and the restricted member is not. By framing a request in the benign field and relying on the model to transfer to the restricted field, the attacker exploits the classifier's inability to distinguish which field is intended.
Detection
- Dual-use intent classification: when a request falls in an overlapping semantic field, classify the most harmful plausible interpretation
- Feature-combination analysis: T2-AP-018J's individual features are legitimate but the combination is diagnostic of malware
Mitigation
Worst-case intent classificationMEDIUM
Output classification (catch harmful responses regardless of input framing)HIGH
Chaining
Chains with T2-AT-001 (Euphemism) — semantic field exploitation IS euphemism at the domain level. Chains with T2-AT-006 (Linguistic Camouflage) when the benign field's technical vocabulary is used.
Framework mapping
Open in the technique browser →OWASP LLMLLM01