mlsanityData to 7 Oct 2026

Black-box Prompt Learning for Pre-trained Language Models

arXiv 2201.08531 ↗First posted 21 Jan 2022cs.CLcited by 70

Not on the map. Why?

Abstract (arXiv)

The increasing scale of general-purpose Pre-trained Language Models (PLMs) necessitates the study of more efficient adaptation across different downstream tasks. In this paper, we establish a Black-box Discrete Prompt Learning (BDPL) to resonate with pragmatic interactions between the cloud infrastructure and edge devices. Particularly, instead of fine-tuning the model in the cloud, we adapt PLMs by prompt learning, which efficiently optimizes only a few parameters of the discrete prompts. Moreover, we consider the scenario that we do not have access to the parameters and gradients of the pre-trained models, except for its outputs given inputs. This black-box setting secures the cloud infrastructure from potential attack and misuse to cause a single-point failure, which is preferable to the white-box counterpart by current infrastructures. Under this black-box constraint, we apply a variance-reduced policy gradient algorithm to estimate the gradients of parameters in the categorical distribution of each discrete prompt. In light of our method, the user devices can efficiently tune their tasks by querying the PLMs bounded by a range of API calls. Our experiments on RoBERTa and GPT-3 demonstrate that the proposed algorithm achieves significant improvement on eight benchmarks in a cloud-device collaboration manner. Finally, we conduct in-depth case studies to comprehensively analyze our method in terms of various data sizes, prompt lengths, training budgets, optimization objectives, prompt transferability, and explanations of the learned prompts. Our code will be available at https://github.com/shizhediao/Black-Box-Prompt-Learning.

Key facts. Cited by 70 papers in the map (data through 7 Oct 2026). Builds on 56 of its 86 references that are in the map. First posted on arXiv 21 Jan 2022.

Builds on

56 of 86 references.

References · 56

  1. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
  2. 2020Language Models are Few-Shot Learnerscited by 32,199
  3. 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,266
  4. 2015Distilling the Knowledge in a Neural Networkcited by 10,076
  5. 2019BART: Denoising Sequence-to-Sequence Pre-training for Natural Language Generation, Translation, and Comprehensioncited by 5,874
  6. 2018GLUE: A Multi-Task Benchmark and Analysis Platform for Natural Language Understandingcited by 4,854
  7. 2021On the Opportunities and Risks of Foundation Modelscited by 3,961
  8. 2021Prefix-Tuning: Optimizing Continuous Prompts for Generationcited by 3,878
  9. 2021The Power of Scale for Parameter-Efficient Prompt Tuningcited by 3,769
  10. 2016Categorical Reparameterization with Gumbel-Softmaxcited by 2,708
  11. 2017A Broad-Coverage Challenge Corpus for Sentence Understanding through Inferencecited by 2,665
  12. 2021Pre-train, Prompt, and Predict: A Systematic Survey of Prompting Methods in Natural Language Processingcited by 2,222
38 more
  1. 2020Don't Stop Pretraining: Adapt Language Models to Domains and Taskscited by 1,548
  2. 2020Making Pre-trained Language Models Better Few-shot Learnerscited by 1,255
  3. 2021Fantastically Ordered Prompts and Where to Find Them: Overcoming Few-Shot Prompt Order Sensitivitycited by 1,122
  4. 2019How Can We Know What Language Models Know?cited by 953
  5. 2018Neural Network Acceptability Judgmentscited by 952
  6. 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 950
  7. 2020Exploiting Cloze Questions for Few Shot Text Classification and Natural Language Inferencecited by 934
  8. 2019DialoGPT: Large-Scale Generative Pre-training for Conversational Response Generationcited by 842
  9. 2021BARTScore: Evaluating Generated Text as Text Generationcited by 719
  10. 2021GPT Understands, Toocited by 715
  11. 2019Universal Adversarial Triggers for Attacking and Analyzing NLPcited by 709
  12. 2021P-Tuning v2: Prompt Tuning Can Be Comparable to Fine-tuning Universally Across Scales and Taskscited by 686
  13. 2019Square Attack: a query-efficient black-box adversarial attack via random searchcited by 682
  14. 2020It's Not Just Size That Matters: Small Language Models Are Also Few-Shot Learnerscited by 668
  15. 2021FLAVA: A Foundational Language And Vision Alignment Modelcited by 646
  16. 2021SimVLM: Simple Visual Language Model Pretraining with Weak Supervisioncited by 645
  17. 2018Black-box Adversarial Attacks with Limited Queries and Informationcited by 499
  18. 2021VLMo: Unified Vision-Language Pre-Training with Mixture-of-Modality-Expertscited by 424
  19. 2021Learning How to Ask: Querying LMs with Mixtures of Soft Promptscited by 376
  20. 2021True Few-Shot Learning with Language Modelscited by 343
  21. 2018Multi-Task Identification of Entities, Relations, and Coreference for Scientific Knowledge Graph Constructioncited by 321
  22. 2021Factual Probing Is [MASK]: Learning vs. Learning to Recallcited by 291
  23. 2022Black-Box Tuning for Language-Model-as-a-Servicecited by 254
  24. 2019Simple Black-box Adversarial Attackscited by 249
  25. 2021PTR: Prompt Tuning with Rules for Text Classificationcited by 238
  26. 2021SPoT: Better Frozen Model Adaptation through Soft Prompt Transfercited by 235
  27. 2021WARP: Word-level Adversarial ReProgrammingcited by 220
  28. 2019Commonsense Knowledge Mining from Pretrained Modelscited by 189
  29. 2019To Tune or Not to Tune? Adapting Pretrained Representations to Diverse Taskscited by 167
  30. 2018Prior Convictions: Black-Box Adversarial Attacks with Bandits and Priorscited by 145
  31. 2019Thieves on Sesame Street! Model Extraction of BERT-based APIscited by 136
  32. 2020The Language Interpretability Tool: Extensible, Interactive Visualizations and Analysis for NLP Modelscited by 125
  33. 2017PubMed 200k RCT: a Dataset for Sequential Sentence Classification in Medical Abstractscited by 123
  34. 2021Entailment as Few-Shot Learnercited by 122
  35. 2019Improving Black-box Adversarial Attacks with a Transfer-based Priorcited by 121
  36. 2021BERTese: Learning to Speak to BERTcited by 82
  37. 2021PADA: Example-based Prompt Learning for on-the-fly Adaptation to Unseen Domainscited by 61
  38. 2019Black-Box Adversarial Attack with Transferable Model-based Embeddingcited by 57

50 most cited of 56 All 56 (JSON)

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2022: 12; 2023: 20; 2024: 22; 2025: 12; 2026: 4.

70 papers.

Sort:

By area:

  1. 2022Few-Shot Parameter-Efficient Fine-Tuning is Better and Cheaper than In-Context Learningcited by 886
  2. 2023Unifying Large Language Models and Knowledge Graphs: A Roadmapcited by 663
  3. 2022RLPrompt: Optimizing Discrete Text Prompts with Reinforcement Learningcited by 361
  4. 2023Fine-Tuning Language Models with Just Forward Passescited by 337
  5. 2023Challenges and Applications of Large Language Modelscited by 251
  6. 2022Delta Tuning: A Comprehensive Study of Parameter Efficient Methods for Pre-trained Language Modelscited by 179
  7. 2023Active Prompting with Chain-of-Thought for Large Language Modelscited by 154
  8. 2024AdvPrompter: Fast Adaptive Adversarial Prompting for LLMscited by 146
  9. 2025Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systemscited by 125
  10. 2023Automatic Prompt Augmentation and Selection with Chain-of-Thought from Labeled Datacited by 119
  11. 2023Batch Calibration: Rethinking Calibration for In-Context Learning and Prompt Engineeringcited by 91
  12. 2024Evolutionary Computation in the Era of Large Language Model: Survey and Roadmapcited by 89
38 more
  1. 2024LISA: Layerwise Importance Sampling for Memory-Efficient Large Language Model Fine-Tuningcited by 88
  2. 2023DeepZero: Scaling up Zeroth-Order Optimization for Deep Model Trainingcited by 76
  3. 2024BadChain: Backdoor Chain-of-Thought Prompting for Large Language Modelscited by 74
  4. 2024Parameter-Efficient Fine-Tuning with Discrete Fourier Transformcited by 67
  5. 2022BBTv2: Towards a Gradient-Free Future with Large Language Modelscited by 53
  6. 2023Learning from models beyond fine-tuningcited by 47
  7. 2024Automated Red Teaming with GOAT: the Generative Offensive Agent Testercited by 41
  8. 2023SAMAug: Point Prompt Augmentation for Segment Anything Modelcited by 38
  9. 2022PromptBoosting: Black-Box Text Classification with Ten Forward Passescited by 36
  10. 2023Language Models as Black-Box Optimizers for Vision-Language Modelscited by 36
  11. 2024Efficient Prompt Optimization Through the Lens of Best Arm Identificationcited by 35
  12. 2024Prompt Optimization with Human Feedbackcited by 35
  13. 2022Input-Tuning: Adapting Unfamiliar Inputs to Frozen Pretrained Modelscited by 34
  14. 2022Fairness Reprogrammingcited by 33
  15. 2023Batched Low-Rank Adaptation of Foundation Modelscited by 32
  16. 2023Preference-grounded Token-level Guidance for Language Model Fine-tuningcited by 31
  17. 2023Use Your INSTINCT: INSTruction optimization for LLMs usIng Neural bandits Coupled with Transformerscited by 29
  18. 2024From Low Rank Gradient Subspace Stabilization to Low-Rank Weights: Observations, Theories, and Applicationscited by 24
  19. 2024Localized Zeroth-Order Prompt Optimizationcited by 23
  20. 2023Prompt-Tuning Decision Transformer with Preference Rankingcited by 19
  21. 2025PromptSculptor: Multi-Agent Based Text-to-Image Prompt Optimizationcited by 19
  22. 2022Prompt-Augmented Linear Probing: Scaling beyond the Limit of Few-shot In-Context Learnerscited by 18
  23. 2022Write and Paint: Generative Vision-Language Models are Unified Modal Learnerscited by 17
  24. 2022Clip-Tuning: Towards Derivative-free Prompt Learning with a Mixture of Rewardscited by 14
  25. 2023Efficient Federated Prompt Tuning for Black-box Large Pre-trained Modelscited by 12
  26. 2022Multitask Pre-training of Modular Prompt for Chinese Few-Shot Learningcited by 11
  27. 2024Matryoshka Pilot: Learning to Drive Black-Box LLMs with LLMscited by 9
  28. 2024Hyperband-based Bayesian Optimization for Black-box Prompt Selectioncited by 9
  29. 2023Plum: Prompt Learning using Metaheuristiccited by 8
  30. 2023When Gradient Descent Meets Derivative-Free Optimization: A Match Made in Black-Box Scenariocited by 5
  31. 2024Black-Box Forgettingcited by 5
  32. 2025DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injectioncited by 5
  33. 2023A Bayesian approach for prompt optimization in pre-trained language modelscited by 4
  34. 2025Logits are All We Need to Adapt Closed Modelscited by 4
  35. 2023Hashtag-Guided Low-Resource Tweet Classificationcited by 3
  36. 2024FLOPS: Forward Learning with OPtimal Samplingcited by 3
  37. 2025CDW-CoT: Clustered Distance-Weighted Chain-of-Thoughts Reasoningcited by 3
  38. 2025On the Robustness of Verbal Confidence of LLMs in Adversarial Attackscited by 3

50 most cited of 70 All 70 (JSON)