Black-box Prompt Learning for Pre-trained Language Models
Not on the map. Why?
Abstract (arXiv)
The increasing scale of general-purpose Pre-trained Language Models (PLMs) necessitates the study of more efficient adaptation across different downstream tasks. In this paper, we establish a Black-box Discrete Prompt Learning (BDPL) to resonate with pragmatic interactions between the cloud infrastructure and edge devices. Particularly, instead of fine-tuning the model in the cloud, we adapt PLMs by prompt learning, which efficiently optimizes only a few parameters of the discrete prompts. Moreover, we consider the scenario that we do not have access to the parameters and gradients of the pre-trained models, except for its outputs given inputs. This black-box setting secures the cloud infrastructure from potential attack and misuse to cause a single-point failure, which is preferable to the white-box counterpart by current infrastructures. Under this black-box constraint, we apply a variance-reduced policy gradient algorithm to estimate the gradients of parameters in the categorical distribution of each discrete prompt. In light of our method, the user devices can efficiently tune their tasks by querying the PLMs bounded by a range of API calls. Our experiments on RoBERTa and GPT-3 demonstrate that the proposed algorithm achieves significant improvement on eight benchmarks in a cloud-device collaboration manner. Finally, we conduct in-depth case studies to comprehensively analyze our method in terms of various data sizes, prompt lengths, training budgets, optimization objectives, prompt transferability, and explanations of the learned prompts. Our code will be available at https://github.com/shizhediao/Black-Box-Prompt-Learning.
Key facts. Cited by 70 papers in the map (data through 7 Oct 2026). Builds on 56 of its 86 references that are in the map. First posted on arXiv 21 Jan 2022.
Builds on
56 of 86 references.
References · 56
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,266
- 2015Distilling the Knowledge in a Neural Networkcited by 10,076
- 2019BART: Denoising Sequence-to-Sequence Pre-training for Natural Language Generation, Translation, and Comprehensioncited by 5,874
- 2018GLUE: A Multi-Task Benchmark and Analysis Platform for Natural Language Understandingcited by 4,854
- 2021On the Opportunities and Risks of Foundation Modelscited by 3,961
- 2021Prefix-Tuning: Optimizing Continuous Prompts for Generationcited by 3,878
- 2021The Power of Scale for Parameter-Efficient Prompt Tuningcited by 3,769
- 2016Categorical Reparameterization with Gumbel-Softmaxcited by 2,708
- 2017A Broad-Coverage Challenge Corpus for Sentence Understanding through Inferencecited by 2,665
- 2021Pre-train, Prompt, and Predict: A Systematic Survey of Prompting Methods in Natural Language Processingcited by 2,222
38 more
- 2020Don't Stop Pretraining: Adapt Language Models to Domains and Taskscited by 1,548
- 2020Making Pre-trained Language Models Better Few-shot Learnerscited by 1,255
- 2021Fantastically Ordered Prompts and Where to Find Them: Overcoming Few-Shot Prompt Order Sensitivitycited by 1,122
- 2019How Can We Know What Language Models Know?cited by 953
- 2018Neural Network Acceptability Judgmentscited by 952
- 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 950
- 2020Exploiting Cloze Questions for Few Shot Text Classification and Natural Language Inferencecited by 934
- 2019DialoGPT: Large-Scale Generative Pre-training for Conversational Response Generationcited by 842
- 2021BARTScore: Evaluating Generated Text as Text Generationcited by 719
- 2021GPT Understands, Toocited by 715
- 2019Universal Adversarial Triggers for Attacking and Analyzing NLPcited by 709
- 2021P-Tuning v2: Prompt Tuning Can Be Comparable to Fine-tuning Universally Across Scales and Taskscited by 686
- 2019Square Attack: a query-efficient black-box adversarial attack via random searchcited by 682
- 2020It's Not Just Size That Matters: Small Language Models Are Also Few-Shot Learnerscited by 668
- 2021FLAVA: A Foundational Language And Vision Alignment Modelcited by 646
- 2021SimVLM: Simple Visual Language Model Pretraining with Weak Supervisioncited by 645
- 2018Black-box Adversarial Attacks with Limited Queries and Informationcited by 499
- 2021VLMo: Unified Vision-Language Pre-Training with Mixture-of-Modality-Expertscited by 424
- 2021Learning How to Ask: Querying LMs with Mixtures of Soft Promptscited by 376
- 2021True Few-Shot Learning with Language Modelscited by 343
- 2018Multi-Task Identification of Entities, Relations, and Coreference for Scientific Knowledge Graph Constructioncited by 321
- 2021Factual Probing Is [MASK]: Learning vs. Learning to Recallcited by 291
- 2022Black-Box Tuning for Language-Model-as-a-Servicecited by 254
- 2019Simple Black-box Adversarial Attackscited by 249
- 2021PTR: Prompt Tuning with Rules for Text Classificationcited by 238
- 2021SPoT: Better Frozen Model Adaptation through Soft Prompt Transfercited by 235
- 2021WARP: Word-level Adversarial ReProgrammingcited by 220
- 2019Commonsense Knowledge Mining from Pretrained Modelscited by 189
- 2019To Tune or Not to Tune? Adapting Pretrained Representations to Diverse Taskscited by 167
- 2018Prior Convictions: Black-Box Adversarial Attacks with Bandits and Priorscited by 145
- 2019Thieves on Sesame Street! Model Extraction of BERT-based APIscited by 136
- 2020The Language Interpretability Tool: Extensible, Interactive Visualizations and Analysis for NLP Modelscited by 125
- 2017PubMed 200k RCT: a Dataset for Sequential Sentence Classification in Medical Abstractscited by 123
- 2021Entailment as Few-Shot Learnercited by 122
- 2019Improving Black-box Adversarial Attacks with a Transfer-based Priorcited by 121
- 2021BERTese: Learning to Speak to BERTcited by 82
- 2021PADA: Example-based Prompt Learning for on-the-fly Adaptation to Unseen Domainscited by 61
- 2019Black-Box Adversarial Attack with Transferable Model-based Embeddingcited by 57
50 most cited of 56 All 56 (JSON)
Built on by
Citing papers per year: 2022: 12; 2023: 20; 2024: 22; 2025: 12; 2026: 4.
70 papers.
Sort:
By area:
- 2022Few-Shot Parameter-Efficient Fine-Tuning is Better and Cheaper than In-Context Learningcited by 886
- 2023Unifying Large Language Models and Knowledge Graphs: A Roadmapcited by 663
- 2022RLPrompt: Optimizing Discrete Text Prompts with Reinforcement Learningcited by 361
- 2023Fine-Tuning Language Models with Just Forward Passescited by 337
- 2023Challenges and Applications of Large Language Modelscited by 251
- 2022Delta Tuning: A Comprehensive Study of Parameter Efficient Methods for Pre-trained Language Modelscited by 179
- 2023Active Prompting with Chain-of-Thought for Large Language Modelscited by 154
- 2024AdvPrompter: Fast Adaptive Adversarial Prompting for LLMscited by 146
- 2025Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systemscited by 125
- 2023Automatic Prompt Augmentation and Selection with Chain-of-Thought from Labeled Datacited by 119
- 2023Batch Calibration: Rethinking Calibration for In-Context Learning and Prompt Engineeringcited by 91
- 2024Evolutionary Computation in the Era of Large Language Model: Survey and Roadmapcited by 89
38 more
- 2024LISA: Layerwise Importance Sampling for Memory-Efficient Large Language Model Fine-Tuningcited by 88
- 2023DeepZero: Scaling up Zeroth-Order Optimization for Deep Model Trainingcited by 76
- 2024BadChain: Backdoor Chain-of-Thought Prompting for Large Language Modelscited by 74
- 2024Parameter-Efficient Fine-Tuning with Discrete Fourier Transformcited by 67
- 2022BBTv2: Towards a Gradient-Free Future with Large Language Modelscited by 53
- 2023Learning from models beyond fine-tuningcited by 47
- 2024Automated Red Teaming with GOAT: the Generative Offensive Agent Testercited by 41
- 2023SAMAug: Point Prompt Augmentation for Segment Anything Modelcited by 38
- 2022PromptBoosting: Black-Box Text Classification with Ten Forward Passescited by 36
- 2023Language Models as Black-Box Optimizers for Vision-Language Modelscited by 36
- 2024Efficient Prompt Optimization Through the Lens of Best Arm Identificationcited by 35
- 2024Prompt Optimization with Human Feedbackcited by 35
- 2022Input-Tuning: Adapting Unfamiliar Inputs to Frozen Pretrained Modelscited by 34
- 2022Fairness Reprogrammingcited by 33
- 2023Batched Low-Rank Adaptation of Foundation Modelscited by 32
- 2023Preference-grounded Token-level Guidance for Language Model Fine-tuningcited by 31
- 2023Use Your INSTINCT: INSTruction optimization for LLMs usIng Neural bandits Coupled with Transformerscited by 29
- 2024From Low Rank Gradient Subspace Stabilization to Low-Rank Weights: Observations, Theories, and Applicationscited by 24
- 2024Localized Zeroth-Order Prompt Optimizationcited by 23
- 2023Prompt-Tuning Decision Transformer with Preference Rankingcited by 19
- 2025PromptSculptor: Multi-Agent Based Text-to-Image Prompt Optimizationcited by 19
- 2022Prompt-Augmented Linear Probing: Scaling beyond the Limit of Few-shot In-Context Learnerscited by 18
- 2022Write and Paint: Generative Vision-Language Models are Unified Modal Learnerscited by 17
- 2022Clip-Tuning: Towards Derivative-free Prompt Learning with a Mixture of Rewardscited by 14
- 2023Efficient Federated Prompt Tuning for Black-box Large Pre-trained Modelscited by 12
- 2022Multitask Pre-training of Modular Prompt for Chinese Few-Shot Learningcited by 11
- 2024Matryoshka Pilot: Learning to Drive Black-Box LLMs with LLMscited by 9
- 2024Hyperband-based Bayesian Optimization for Black-box Prompt Selectioncited by 9
- 2023Plum: Prompt Learning using Metaheuristiccited by 8
- 2023When Gradient Descent Meets Derivative-Free Optimization: A Match Made in Black-Box Scenariocited by 5
- 2024Black-Box Forgettingcited by 5
- 2025DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injectioncited by 5
- 2023A Bayesian approach for prompt optimization in pre-trained language modelscited by 4
- 2025Logits are All We Need to Adapt Closed Modelscited by 4
- 2023Hashtag-Guided Low-Resource Tweet Classificationcited by 3
- 2024FLOPS: Forward Learning with OPtimal Samplingcited by 3
- 2025CDW-CoT: Clustered Distance-Weighted Chain-of-Thoughts Reasoningcited by 3
- 2025On the Robustness of Verbal Confidence of LLMs in Adversarial Attackscited by 3
50 most cited of 70 All 70 (JSON)
- 2026Towards Spec Learning: Inference-Time Alignment from Preference Pairs22 Jun 2026
- 2026Black-Box Continual Learning for Vision-Language Models22 Jun 2026
- 2026Projection-Free Evolution Strategies for Continuous Prompt Search14 Mar 2026
- 2026AsynDBT: Asynchronous Distributed Bilevel Tuning for efficient In-Context Learning with Large Language Models6 Feb 2026
- 2025Towards Improving Interpretability of Language Model Generation through a Structured Knowledge Discovery Approach28 Nov 2025
- 2025FedPOB: Sample-Efficient Federated Prompt Optimization via Bandits29 Sep 2025
- 2025PromptSculptor: Multi-Agent Based Text-to-Image Prompt Optimization15 Sep 2025
- 2025Discrete Prompt Tuning via Recursive Utilization of Black-box Multimodal Large Language Model for Personalized Visual Emotion Recognition30 Aug 2025
- 2025On the Evolution of Federated Post-Training Large Language Models: A Model Accessibility View22 Aug 2025
- 2025DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection20 Jul 2025
- 2025On the Robustness of Verbal Confidence of LLMs in Adversarial Attacks9 Jul 2025
- 2025FedOne: Query-Efficient Federated Learning for Black-box Discrete Prompt Learning17 Jun 2025
38 more
- 2025Daunce: Data Attribution through Uncertainty Estimation29 May 2025
- 2025Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systems31 Mar 2025
- 2025Logits are All We Need to Adapt Closed Models3 Feb 2025
- 2025CDW-CoT: Clustered Distance-Weighted Chain-of-Thoughts Reasoning21 Jan 2025
- 2024Hyperband-based Bayesian Optimization for Black-box Prompt Selection10 Dec 2024
- 2024Black-Box Forgetting1 Nov 2024
- 2024Matryoshka Pilot: Learning to Drive Black-Box LLMs with LLMs28 Oct 2024
- 2024FLOPS: Forward Learning with OPtimal Sampling8 Oct 2024
- 2024In-context Demonstration Matters: On Prompt Optimization for Pseudo-Supervision Refinement4 Oct 2024
- 2024Automated Red Teaming with GOAT: the Generative Offensive Agent Tester2 Oct 2024
- 2024Doppelg"anger's Watch: A Split Objective Approach to Large Language Models9 Sep 2024
- 2024From Low Rank Gradient Subspace Stabilization to Low-Rank Weights: Observations, Theories, and Applications15 Jul 2024
- 2024CPT: Consistent Proxy Tuning for Black-box Optimization1 Jul 2024
- 2024Data Augmentation of Multi-turn Psychological Dialogue via Knowledge-driven Progressive Thought Prompting24 Jun 2024
- 2024LLM2TEA: An Agentic AI Designer for Discovery with Generative Evolutionary Multitasking21 Jun 2024
- 2024Multi-Prompting Decoder Helps Better Language Understanding10 Jun 2024
- 2024Prompt Optimization with Human Feedback27 May 2024
- 2024Parameter-Efficient Fine-Tuning with Discrete Fourier Transform5 May 2024
- 2024AdvPrompter: Fast Adaptive Adversarial Prompting for LLMs21 Apr 2024
- 2024LISA: Layerwise Importance Sampling for Memory-Efficient Large Language Model Fine-Tuning26 Mar 2024
- 2024CrossTune: Black-Box Few-Shot Classification with Label Enhancement19 Mar 2024
- 2024Localized Zeroth-Order Prompt Optimization5 Mar 2024
- 2024Efficient Prompt Optimization Through the Lens of Best Arm Identification15 Feb 2024
- 2024Advancing Legal Reasoning: The Integration of AI to Navigate Complexities and Biases in Global Jurisprudence with Semi-Automated Arbitration Processes (SAAPs)6 Feb 2024
- 2024BadChain: Backdoor Chain-of-Thought Prompting for Large Language Models20 Jan 2024
- 2024Evolutionary Computation in the Era of Large Language Model: Survey and Roadmap18 Jan 2024
- 2023Batched Low-Rank Adaptation of Foundation Models9 Dec 2023
- 2023A Bayesian approach for prompt optimization in pre-trained language models1 Dec 2023
- 2023Plum: Prompt Learning using Metaheuristic14 Nov 2023
- 2023Learning from models beyond fine-tuning12 Oct 2023
- 2023Efficient Federated Prompt Tuning for Black-box Large Pre-trained Models4 Oct 2023
- 2023DeepZero: Scaling up Zeroth-Order Optimization for Deep Model Training3 Oct 2023
- 2023Use Your INSTINCT: INSTruction optimization for LLMs usIng Neural bandits Coupled with Transformers2 Oct 2023
- 2023Batch Calibration: Rethinking Calibration for In-Context Learning and Prompt Engineering29 Sep 2023
- 2023Language Models as Black-Box Optimizers for Vision-Language Models12 Sep 2023
- 2023Challenges and Applications of Large Language Models19 Jul 2023
- 2023SAMAug: Point Prompt Augmentation for Segment Anything Model3 Jul 2023
- 2023Unifying Large Language Models and Knowledge Graphs: A Roadmap14 Jun 2023
50 newest of 70 All 70 (JSON)
- 2023Active Prompting with Chain-of-Thought for Large Language Modelscited by 154
- 2023Automatic Prompt Augmentation and Selection with Chain-of-Thought from Labeled Datacited by 119
- 2023Batch Calibration: Rethinking Calibration for In-Context Learning and Prompt Engineeringcited by 91
- 2024BadChain: Backdoor Chain-of-Thought Prompting for Large Language Modelscited by 74
- 2025CDW-CoT: Clustered Distance-Weighted Chain-of-Thoughts Reasoningcited by 3
- 2024Data Augmentation of Multi-turn Psychological Dialogue via Knowledge-driven Progressive Thought Promptingcited by 2
- 2024Advancing Legal Reasoning: The Integration of AI to Navigate Complexities and Biases in Global Jurisprudence with Semi-Automated Arbitration Processes (SAAPs)cited by 1
- 2025CDW-CoT: Clustered Distance-Weighted Chain-of-Thoughts Reasoning21 Jan 2025
- 2024Data Augmentation of Multi-turn Psychological Dialogue via Knowledge-driven Progressive Thought Prompting24 Jun 2024
- 2024Advancing Legal Reasoning: The Integration of AI to Navigate Complexities and Biases in Global Jurisprudence with Semi-Automated Arbitration Processes (SAAPs)6 Feb 2024
- 2024BadChain: Backdoor Chain-of-Thought Prompting for Large Language Models20 Jan 2024
- 2023Batch Calibration: Rethinking Calibration for In-Context Learning and Prompt Engineering29 Sep 2023
- 2023Automatic Prompt Augmentation and Selection with Chain-of-Thought from Labeled Data24 Feb 2023
- 2023Active Prompting with Chain-of-Thought for Large Language Models23 Feb 2023
- 2023Language Models as Black-Box Optimizers for Vision-Language Modelscited by 36
- 2022Write and Paint: Generative Vision-Language Models are Unified Modal Learnerscited by 17
- 2025Discrete Prompt Tuning via Recursive Utilization of Black-box Multimodal Large Language Model for Personalized Visual Emotion Recognitioncited by 0
- 2026Black-Box Continual Learning for Vision-Language Modelscited by 0
- 2026Black-Box Continual Learning for Vision-Language Models22 Jun 2026
- 2025Discrete Prompt Tuning via Recursive Utilization of Black-box Multimodal Large Language Model for Personalized Visual Emotion Recognition30 Aug 2025
- 2023Language Models as Black-Box Optimizers for Vision-Language Models12 Sep 2023
- 2022Write and Paint: Generative Vision-Language Models are Unified Modal Learners15 Jun 2022
- 2025Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systemscited by 125
- 2024Automated Red Teaming with GOAT: the Generative Offensive Agent Testercited by 41
- 2024LLM2TEA: An Agentic AI Designer for Discovery with Generative Evolutionary Multitaskingcited by 2
- 2025Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systems31 Mar 2025
- 2024Automated Red Teaming with GOAT: the Generative Offensive Agent Tester2 Oct 2024
- 2024LLM2TEA: An Agentic AI Designer for Discovery with Generative Evolutionary Multitasking21 Jun 2024
- 2024AdvPrompter: Fast Adaptive Adversarial Prompting for LLMscited by 146
- 2024AdvPrompter: Fast Adaptive Adversarial Prompting for LLMs21 Apr 2024
- 2022Few-Shot Parameter-Efficient Fine-Tuning is Better and Cheaper than In-Context Learningcited by 886
- 2023Unifying Large Language Models and Knowledge Graphs: A Roadmapcited by 663
- 2022RLPrompt: Optimizing Discrete Text Prompts with Reinforcement Learningcited by 361
- 2023Fine-Tuning Language Models with Just Forward Passescited by 337
- 2023Challenges and Applications of Large Language Modelscited by 251
- 2022Delta Tuning: A Comprehensive Study of Parameter Efficient Methods for Pre-trained Language Modelscited by 179
- 2024Evolutionary Computation in the Era of Large Language Model: Survey and Roadmapcited by 89
- 2024LISA: Layerwise Importance Sampling for Memory-Efficient Large Language Model Fine-Tuningcited by 88
- 2023DeepZero: Scaling up Zeroth-Order Optimization for Deep Model Trainingcited by 76
- 2024Parameter-Efficient Fine-Tuning with Discrete Fourier Transformcited by 67
- 2022BBTv2: Towards a Gradient-Free Future with Large Language Modelscited by 53
- 2023Learning from models beyond fine-tuningcited by 47
12 most cited of 51 All 51 (JSON)
- 2026Projection-Free Evolution Strategies for Continuous Prompt Search14 Mar 2026
- 2026AsynDBT: Asynchronous Distributed Bilevel Tuning for efficient In-Context Learning with Large Language Models6 Feb 2026
- 2025Towards Improving Interpretability of Language Model Generation through a Structured Knowledge Discovery Approach28 Nov 2025
- 2025FedPOB: Sample-Efficient Federated Prompt Optimization via Bandits29 Sep 2025
- 2025PromptSculptor: Multi-Agent Based Text-to-Image Prompt Optimization15 Sep 2025
- 2025On the Evolution of Federated Post-Training Large Language Models: A Model Accessibility View22 Aug 2025
- 2025On the Robustness of Verbal Confidence of LLMs in Adversarial Attacks9 Jul 2025
- 2025FedOne: Query-Efficient Federated Learning for Black-box Discrete Prompt Learning17 Jun 2025
- 2025Daunce: Data Attribution through Uncertainty Estimation29 May 2025
- 2025Logits are All We Need to Adapt Closed Models3 Feb 2025
- 2024Hyperband-based Bayesian Optimization for Black-box Prompt Selection10 Dec 2024
- 2024Black-Box Forgetting1 Nov 2024
12 newest of 51 All 51 (JSON)