Unleashing the Power of Visual Prompting At the Pixel Level
Not on the map. Why?
Abstract (arXiv)
This paper presents a simple and effective visual prompting method for adapting pre-trained models to downstream recognition tasks. Our method includes two key designs. First, rather than directly adding together the prompt and the image, we treat the prompt as an extra and independent learnable component. We show that the strategy of reconciling the prompt and the image matters, and find that warping the prompt around a properly shrinked image empirically works the best. Second, we re-introduce two "old tricks" commonly used in building transferable adversarial examples, i.e., input diversity and gradient normalization, into visual prompting. These techniques improve optimization and enable the prompt to generalize better. We provide extensive experimental results to demonstrate the effectiveness of our method. Using a CLIP model, our prompting method sets a new record of 82.8% average accuracy across 12 popular classification datasets, substantially surpassing the prior art by +5.6%. It is worth noting that this prompting performance already outperforms linear probing by +2.1% and can even match fully fine-tuning in certain datasets. In addition, our prompting method shows competitive performance across different data scales and against distribution shifts. The code is publicly available at https://github.com/UCSC-VLAA/EVP.
Key facts. Cited by 37 papers in the map (data through 7 Oct 2026). Builds on 39 of its 52 references that are in the map. First posted on arXiv 20 Dec 2022.
Builds on
39 of 52 references.
References · 39
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,160
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,266
- 2021Masked Autoencoders Are Scalable Vision Learnerscited by 7,339
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2021On the Opportunities and Risks of Foundation Modelscited by 3,961
- 2021Prefix-Tuning: Optimizing Continuous Prompts for Generationcited by 3,878
27 more
- 2021The Power of Scale for Parameter-Efficient Prompt Tuningcited by 3,769
- 2019CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Featurescited by 2,875
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
- 2021BEiT: BERT Pre-Training of Image Transformerscited by 2,360
- 2021Learning to Prompt for Vision-Language Modelscited by 2,269
- 2019RandAugment: Practical automated data augmentation with a reduced search spacecited by 2,261
- 2021Pre-train, Prompt, and Predict: A Systematic Survey of Prompting Methods in Natural Language Processingcited by 2,222
- 2013Describing Textures in the Wildcited by 2,110
- 2019Language Models as Knowledge Bases?cited by 1,922
- 2022Visual Prompt Tuningcited by 1,674
- 2017EuroSAT: A Novel Dataset and Deep Learning Benchmark for Land Use and Land Cover Classificationcited by 1,488
- 2016CLEVR: A Diagnostic Dataset for Compositional Language and Elementary Visual Reasoningcited by 1,445
- 2020WILDS: A Benchmark of in-the-Wild Distribution Shiftscited by 1,366
- 2020Making Pre-trained Language Models Better Few-shot Learnerscited by 1,255
- 2017Remote Sensing Image Scene Classification: Benchmark and State of the Artcited by 791
- 2017Evasion Attacks against Machine Learning at Test Timecited by 686
- 2021P-Tuning v2: Prompt Tuning Can Be Comparable to Fine-tuning Universally Across Scales and Taskscited by 686
- 2018Exploring the Limits of Weakly Supervised Pretrainingcited by 604
- 2018Improving Transferability of Adversarial Examples with Input Diversitycited by 591
- 2019Evading Defenses to Transferable Adversarial Examples by Translation-Invariant Attackscited by 440
- 2022Exploring Visual Prompts for Adapting Large-Scale Modelscited by 271
- 2021Admix: Enhancing the Transferability of Adversarial Attackscited by 155
- 2021Template-Based Named Entity Recognition Using BARTcited by 153
- 2018Adversarial Reprogramming of Neural Networkscited by 115
- 2022Understanding and Improving Visual Prompting: A Label-Mapping Perspectivecited by 86
- 2020Transfer Learning without Knowing: Reprogramming Black-box Machine Learning Models with Scarce Data and Limited Resourcescited by 83
- 2017Boosting Adversarial Attacks with Momentumcited by 23
Built on by
Citing papers per year: 2023: 9; 2024: 13; 2025: 12; 2026: 3.
37 papers.
Sort:
By area:
- 2023Waffling around for Performance: Visual Classification with Random Words and Broad Conceptscited by 100
- 2024Parameter-Efficient Fine-Tuning in Large Models: A Survey of Methodologiescited by 44
- 2025Parameter-Efficient Fine-Tuning for Foundation Modelscited by 43
- 2023Visual Tuningcited by 34
- 2023AutoVP: An Automated Visual Prompting Framework and Benchmarkcited by 29
- 2024Few-shot Adaptation of Multi-modal Foundation Models: A Surveycited by 28
- 2025Advances in Multimodal Adaptation and Generalization: From Traditional Approaches to Foundation Modelscited by 23
- 2024Parameter-Efficient Fine-Tuning for Pre-Trained Vision Models: A Survey and Benchmarkcited by 21
- 2025Prompt-based Adaptation in Large-scale Vision Models: A Surveycited by 21
- 2025Edge Prompt Tuning for Graph Neural Networkscited by 18
- 2024Exploring the Transferability of Visual Prompting for Multimodal Large Language Modelscited by 15
- 2023Prompt Guided Transformer for Multi-Task Dense Predictioncited by 13
25 more
- 2023A Systematic Survey of Prompt Engineering on Vision-Language Foundation Modelscited by 12
- 2024SGPT: Few-Shot Prompt Tuning for Signed Graphscited by 6
- 2024Not All Prompts Are Secure: A Switchable Backdoor Attack Against Pre-trained Vision Transformerscited by 5
- 2023Rethinking Visual Prompt Learning as Masked Visual Token Modelingcited by 4
- 2023Prompt Backdoors in Visual Prompt Learningcited by 4
- 2023Task-Oriented Multi-Modal Mutual Leaning for Vision-Language Modelscited by 3
- 2024Open-Set Video-based Facial Expression Recognition with Human Expression-sensitive Promptingcited by 3
- 2024Encapsulating Knowledge in One Promptcited by 3
- 2025Neural Network Reprogrammability: A Unified Theme on Model Reprogramming, Prompt Tuning, and Prompt Instructioncited by 3
- 2023Few-Shot Classification & Segmentation Using Large Language Models Agentcited by 2
- 2024Proactive Schemes: A Survey of Adversarial Attacks for Social Goodcited by 2
- 2025Exploring Interpretability for Visual Prompt Tuning with Cross-layer Conceptscited by 2
- 2024Training Spatial-Frequency Visual Prompts and Probabilistic Clusters for Accurate Black-Box Transfer Learningcited by 1
- 2025Invisible Watermarks, Visible Gains: Steering Machine Unlearning with Bi-Level Watermarking Designcited by 1
- 2025Towards Single-Source Domain Generalized Object Detection via Causal Visual Promptscited by 1
- 2026Visual prompting reimagined: The power of the Activation Promptscited by 1
- 2024A Simple Framework Uniting Visual In-context Learning with Masked Image Modeling to Improve Ultrasound Segmentationcited by 0
- 2024MoVL:Exploring Fusion Strategies for the Domain-Adaptive Application of Pretrained Models in Medical Imaging Taskscited by 0
- 2024E2MPL:An Enduring and Efficient Meta Prompt Learning Framework for Few-shot Unsupervised Domain Adaptationcited by 0
- 2025Towards Open World Detection: A Surveycited by 0
- 2025Parameter-Efficient Adaptation of mPLUG-Owl2 via Pixel-Level Visual Prompts for NR-IQAcited by 0
- 2025Enhancing Visual Prompting through Expanded Transformation Space and Overfitting Mitigationcited by 0
- 2025FlexICL: A Flexible Visual In-context Learning Framework for Elbow and Wrist Ultrasound Segmentationcited by 0
- 2026Beyond Low-Rank: Low-Rank Sparse Prompting via Spiking Neural Network and Prompt Factorizationcited by 0
- 2026Model Agnostic Graph Prompt Learning for Crystal Property Predictioncited by 0
- 2026Model Agnostic Graph Prompt Learning for Crystal Property Prediction9 Jul 2026
- 2026Beyond Low-Rank: Low-Rank Sparse Prompting via Spiking Neural Network and Prompt Factorization1 Jun 2026
- 2026Visual prompting reimagined: The power of the Activation Prompts7 Apr 2026
- 2025FlexICL: A Flexible Visual In-context Learning Framework for Elbow and Wrist Ultrasound Segmentation30 Oct 2025
- 2025Towards Single-Source Domain Generalized Object Detection via Causal Visual Prompts22 Oct 2025
- 2025Prompt-based Adaptation in Large-scale Vision Models: A Survey15 Oct 2025
- 2025Enhancing Visual Prompting through Expanded Transformation Space and Overfitting Mitigation9 Oct 2025
- 2025Parameter-Efficient Adaptation of mPLUG-Owl2 via Pixel-Level Visual Prompts for NR-IQA3 Sep 2025
- 2025Towards Open World Detection: A Survey22 Aug 2025
- 2025Invisible Watermarks, Visible Gains: Steering Machine Unlearning with Bi-Level Watermarking Design13 Aug 2025
- 2025Neural Network Reprogrammability: A Unified Theme on Model Reprogramming, Prompt Tuning, and Prompt Instruction5 Jun 2025
- 2025Exploring Interpretability for Visual Prompt Tuning with Cross-layer Concepts8 Mar 2025
25 more
- 2025Edge Prompt Tuning for Graph Neural Networks2 Mar 2025
- 2025Advances in Multimodal Adaptation and Generalization: From Traditional Approaches to Foundation Models30 Jan 2025
- 2025Parameter-Efficient Fine-Tuning for Foundation Models23 Jan 2025
- 2024SGPT: Few-Shot Prompt Tuning for Signed Graphs11 Dec 2024
- 2024Parameter-Efficient Fine-Tuning in Large Models: A Survey of Methodologies24 Oct 2024
- 2024Proactive Schemes: A Survey of Adversarial Attacks for Social Good24 Sep 2024
- 2024Training Spatial-Frequency Visual Prompts and Probabilistic Clusters for Accurate Black-Box Transfer Learning15 Aug 2024
- 2024Encapsulating Knowledge in One Prompt16 Jul 2024
- 2024E2MPL:An Enduring and Efficient Meta Prompt Learning Framework for Few-shot Unsupervised Domain Adaptation4 Jul 2024
- 2024Not All Prompts Are Secure: A Switchable Backdoor Attack Against Pre-trained Vision Transformers17 May 2024
- 2024MoVL:Exploring Fusion Strategies for the Domain-Adaptive Application of Pretrained Models in Medical Imaging Tasks13 May 2024
- 2024Open-Set Video-based Facial Expression Recognition with Human Expression-sensitive Prompting26 Apr 2024
- 2024Exploring the Transferability of Visual Prompting for Multimodal Large Language Models17 Apr 2024
- 2024A Simple Framework Uniting Visual In-context Learning with Masked Image Modeling to Improve Ultrasound Segmentation22 Feb 2024
- 2024Parameter-Efficient Fine-Tuning for Pre-Trained Vision Models: A Survey and Benchmark3 Feb 2024
- 2024Few-shot Adaptation of Multi-modal Foundation Models: A Survey3 Jan 2024
- 2023Few-Shot Classification & Segmentation Using Large Language Models Agent19 Nov 2023
- 2023AutoVP: An Automated Visual Prompting Framework and Benchmark12 Oct 2023
- 2023Prompt Backdoors in Visual Prompt Learning11 Oct 2023
- 2023Prompt Guided Transformer for Multi-Task Dense Prediction28 Jul 2023
- 2023A Systematic Survey of Prompt Engineering on Vision-Language Foundation Models24 Jul 2023
- 2023Waffling around for Performance: Visual Classification with Random Words and Broad Concepts12 Jun 2023
- 2023Visual Tuning10 May 2023
- 2023Task-Oriented Multi-Modal Mutual Leaning for Vision-Language Models30 Mar 2023
- 2023Rethinking Visual Prompt Learning as Masked Visual Token Modeling9 Mar 2023
- 2023Waffling around for Performance: Visual Classification with Random Words and Broad Conceptscited by 100
- 2024Exploring the Transferability of Visual Prompting for Multimodal Large Language Modelscited by 15
- 2023A Systematic Survey of Prompt Engineering on Vision-Language Foundation Modelscited by 12
- 2023Task-Oriented Multi-Modal Mutual Leaning for Vision-Language Modelscited by 3
- 2024Exploring the Transferability of Visual Prompting for Multimodal Large Language Models17 Apr 2024
- 2023A Systematic Survey of Prompt Engineering on Vision-Language Foundation Models24 Jul 2023
- 2023Waffling around for Performance: Visual Classification with Random Words and Broad Concepts12 Jun 2023
- 2023Task-Oriented Multi-Modal Mutual Leaning for Vision-Language Models30 Mar 2023
- 2024Parameter-Efficient Fine-Tuning in Large Models: A Survey of Methodologiescited by 44
- 2025Parameter-Efficient Fine-Tuning for Foundation Modelscited by 43
- 2023Visual Tuningcited by 34
- 2023AutoVP: An Automated Visual Prompting Framework and Benchmarkcited by 29
- 2024Few-shot Adaptation of Multi-modal Foundation Models: A Surveycited by 28
- 2025Advances in Multimodal Adaptation and Generalization: From Traditional Approaches to Foundation Modelscited by 23
- 2024Parameter-Efficient Fine-Tuning for Pre-Trained Vision Models: A Survey and Benchmarkcited by 21
- 2025Prompt-based Adaptation in Large-scale Vision Models: A Surveycited by 21
- 2025Edge Prompt Tuning for Graph Neural Networkscited by 18
- 2023Prompt Guided Transformer for Multi-Task Dense Predictioncited by 13
- 2024SGPT: Few-Shot Prompt Tuning for Signed Graphscited by 6
- 2023Rethinking Visual Prompt Learning as Masked Visual Token Modelingcited by 4
12 most cited of 31 All 31 (JSON)
- 2026Model Agnostic Graph Prompt Learning for Crystal Property Prediction9 Jul 2026
- 2026Beyond Low-Rank: Low-Rank Sparse Prompting via Spiking Neural Network and Prompt Factorization1 Jun 2026
- 2026Visual prompting reimagined: The power of the Activation Prompts7 Apr 2026
- 2025FlexICL: A Flexible Visual In-context Learning Framework for Elbow and Wrist Ultrasound Segmentation30 Oct 2025
- 2025Towards Single-Source Domain Generalized Object Detection via Causal Visual Prompts22 Oct 2025
- 2025Prompt-based Adaptation in Large-scale Vision Models: A Survey15 Oct 2025
- 2025Enhancing Visual Prompting through Expanded Transformation Space and Overfitting Mitigation9 Oct 2025
- 2025Parameter-Efficient Adaptation of mPLUG-Owl2 via Pixel-Level Visual Prompts for NR-IQA3 Sep 2025
- 2025Towards Open World Detection: A Survey22 Aug 2025
- 2025Invisible Watermarks, Visible Gains: Steering Machine Unlearning with Bi-Level Watermarking Design13 Aug 2025
- 2025Neural Network Reprogrammability: A Unified Theme on Model Reprogramming, Prompt Tuning, and Prompt Instruction5 Jun 2025
- 2025Exploring Interpretability for Visual Prompt Tuning with Cross-layer Concepts8 Mar 2025
12 newest of 31 All 31 (JSON)