mlsanityData to 7 Oct 2026

BlackVIP: Black-Box Visual Prompting for Robust Transfer Learning

arXiv 2303.14773 ↗First posted 26 Mar 2023cs.CV cs.AI cs.LGcited by 70

Not on the map. Why?

Abstract (arXiv)

With the surge of large-scale pre-trained models (PTMs), fine-tuning these models to numerous downstream tasks becomes a crucial problem. Consequently, parameter efficient transfer learning (PETL) of large models has grasped huge attention. While recent PETL methods showcase impressive performance, they rely on optimistic assumptions: 1) the entire parameter set of a PTM is available, and 2) a sufficiently large memory capacity for the fine-tuning is equipped. However, in most real-world applications, PTMs are served as a black-box API or proprietary software without explicit parameter accessibility. Besides, it is hard to meet a large memory requirement for modern PTMs. In this work, we propose black-box visual prompting (BlackVIP), which efficiently adapts the PTMs without knowledge about model architectures and parameters. BlackVIP has two components; 1) Coordinator and 2) simultaneous perturbation stochastic approximation with gradient correction (SPSA-GC). The Coordinator designs input-dependent image-shaped visual prompts, which improves few-shot adaptation and robustness on distribution/location shift. SPSA-GC efficiently estimates the gradient of a target model to update Coordinator. Extensive experiments on 16 datasets demonstrate that BlackVIP enables robust adaptation to diverse domains without accessing PTMs' parameters, with minimal memory requirements. Code: urlhttps://github.com/changdaeoh/BlackVIP

Key facts. Cited by 70 papers in the map (data through 7 Oct 2026). Builds on 63 of its 105 references that are in the map. First posted on arXiv 26 Mar 2023.

Builds on

63 of 105 references.

References · 63

  1. 2017Attention Is All You Needcited by 59,932
  2. 2015Deep Residual Learning for Image Recognitioncited by 51,809
  3. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
  4. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
  5. 2020Language Models are Few-Shot Learnerscited by 32,199
  6. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
  7. 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,160
  8. 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
  9. 2020A Simple Framework for Contrastive Learning of Visual Representationscited by 11,979
  10. 2019Momentum Contrast for Unsupervised Visual Representation Learningcited by 7,482
  11. 2021Masked Autoencoders Are Scalable Vision Learnerscited by 7,339
  12. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
38 more
  1. 2021Emerging Properties in Self-Supervised Vision Transformerscited by 6,893
  2. 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,690
  3. 2020Scaling Laws for Neural Language Modelscited by 6,411
  4. 2020Bootstrap your own latent: A new approach to self-supervised Learningcited by 4,712
  5. 2019Parameter-Efficient Transfer Learning for NLPcited by 4,195
  6. 2021Prefix-Tuning: Optimizing Continuous Prompts for Generationcited by 3,878
  7. 2021Scaling Up Visual and Vision-Language Representation Learning With Noisy Text Supervisioncited by 3,848
  8. 2021The Power of Scale for Parameter-Efficient Prompt Tuningcited by 3,769
  9. 2021BEiT: BERT Pre-Training of Image Transformerscited by 2,360
  10. 2016Xception: Deep Learning with Depthwise Separable Convolutionscited by 2,320
  11. 2021Learning to Prompt for Vision-Language Modelscited by 2,269
  12. 2013Describing Textures in the Wildcited by 2,110
  13. 2021Barlow Twins: Self-Supervised Learning via Redundancy Reductioncited by 1,818
  14. 2013Fine-Grained Visual Classification of Aircraftcited by 1,701
  15. 2022Visual Prompt Tuningcited by 1,674
  16. 2017EuroSAT: A Novel Dataset and Deep Learning Benchmark for Land Use and Land Cover Classificationcited by 1,488
  17. 2016CLEVR: A Diagnostic Dataset for Compositional Language and Elementary Visual Reasoningcited by 1,445
  18. 2022Conditional Prompt Learning for Vision-Language Modelscited by 1,427
  19. 2021SimMIM: A Simple Framework for Masked Image Modelingcited by 1,147
  20. 2021CLIP-Adapter: Better Vision-Language Models with Feature Adapterscited by 1,021
  21. 2021Florence: A New Foundation Model for Computer Visioncited by 802
  22. 2017Remote Sensing Image Scene Classification: Benchmark and State of the Artcited by 791
  23. 2021Robust fine-tuning of zero-shot modelscited by 785
  24. 2015The Limitations of Deep Learning in Adversarial Settingscited by 784
  25. 2020AdapterFusion: Non-Destructive Task Composition for Transfer Learningcited by 780
  26. 2022Fine-Tuning can Distort Pretrained Features and Underperform Out-of-Distributioncited by 722
  27. 2022AdaptFormer: Adapting Vision Transformers for Scalable Visual Recognitioncited by 714
  28. 2022MaPLe: Multi-modal Prompt Learningcited by 685
  29. 2021FLAVA: A Foundational Language And Vision Alignment Modelcited by 646
  30. 2022RLPrompt: Optimizing Discrete Text Prompts with Reinforcement Learningcited by 361
  31. 2021Prompting Visual-Language Models for Efficient Video Understandingcited by 309
  32. 2022Black-Box Tuning for Language-Model-as-a-Servicecited by 254
  33. 2022Visual Prompting via Image Inpaintingcited by 248
  34. 2019Adversarial Attacks and Defenses in Images, Graphs and Text: A Reviewcited by 234
  35. 2022Surgical Fine-Tuning Improves Adaptation to Distribution Shiftscited by 205
  36. 2019Learning De-biased Representations with Biased Representationscited by 199
  37. 2020A Primer on Zeroth-Order Optimization in Signal Processing and Machine Learningcited by 160
  38. 2022Unified Vision and Language Prompt Learningcited by 145

50 most cited of 63 All 63 (JSON)

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2023: 12; 2024: 28; 2025: 18; 2026: 12.

70 papers.

Sort:

By area:

  1. 2023Batch Calibration: Rethinking Calibration for In-Context Learning and Prompt Engineeringcited by 91
  2. 2024Visual Prompting in Multimodal Large Language Models: A Surveycited by 52
  3. 2023SD4Match: Learning to Prompt Stable Diffusion Model for Semantic Matchingcited by 38
  4. 2023Language Models as Black-Box Optimizers for Vision-Language Modelscited by 36
  5. 2024Facing the Elephant in the Room: Visual Prompt Tuning or Full Finetuning?cited by 31
  6. 2023Instruct Me More! Random Prompting for Visual In-Context Learningcited by 30
  7. 2023AutoVP: An Automated Visual Prompting Framework and Benchmarkcited by 29
  8. 2025Visual Instance-aware Prompt Tuningcited by 29
  9. 2023Understanding and Mitigating the Label Noise in Pre-training on Downstream Taskscited by 27
  10. 2024CoLLaVO: Crayon Large Language and Vision mOdelcited by 26
  11. 2023Grounding Foundation Models through Federated Transfer Learning: A General Frameworkcited by 24
  12. 2024Adapting to Distribution Shift by Visual Domain Prompt Generationcited by 23
38 more
  1. 2025Prompt-based Adaptation in Large-scale Vision Models: A Surveycited by 21
  2. 2025LoR-VP: Low-Rank Visual Prompting for Efficient Vision Model Adaptationcited by 17
  3. 2024On Catastrophic Inheritance of Large Foundation Modelscited by 15
  4. 2024Exploring the Transferability of Visual Prompting for Multimodal Large Language Modelscited by 15
  5. 2024PACE: Marrying generalization in PArameter-efficient fine-tuning with Consistency rEgularizationcited by 14
  6. 2023Efficient Federated Prompt Tuning for Black-box Large Pre-trained Modelscited by 12
  7. 2024Bayesian-guided Label Mapping for Visual Reprogrammingcited by 12
  8. 2025ProAPO: Progressively Automatic Prompt Optimization for Visual Classificationcited by 12
  9. 2023Cloud-Device Collaborative Learning for Multimodal Large Language Modelscited by 11
  10. 2024Derivative-Free Optimization for Low-Rank Adaptation in Large Language Modelscited by 11
  11. 2024UPAM: Unified Prompt Attack in Text-to-Image Generation Models Against Both Textual Filters and Visual Checkerscited by 11
  12. 2024Subgraph-level Universal Prompt Tuningcited by 9
  13. 2025Re-Imagining Multimodal Instruction Tuning: A Representation Viewcited by 9
  14. 2025Test-Time Model Adaptation for Quantized Neural Networkscited by 9
  15. 2024Impact of Noisy Supervision in Foundation Model Learningcited by 8
  16. 2024Learning Visual Conditioning Tokens to Correct Domain Shift for Fully Test-time Adaptationcited by 7
  17. 2025Attribute-based Visual Reprogramming for Vision-Language Modelscited by 7
  18. 2023Black-Box Tuning of Vision-Language Models with Effective Gradient Approximationcited by 6
  19. 2024Forget Vectors at Play: Universal Input Perturbations Driving Machine Unlearning in Image Classificationcited by 6
  20. 2025Confidence-calibrated covariate shift correction for few-shot classification in Vision-Language Modelscited by 6
  21. 2023Towards Robust and Accurate Visual Promptingcited by 5
  22. 2024Black-Box Forgettingcited by 5
  23. 2024Poor Man's Training on MCUs: A Memory-Efficient Quantized Back-Propagation-Free Approachcited by 5
  24. 2025Unified Prompt Attack Against Text-to-Image Generation Modelscited by 5
  25. 2024Dual-Path Adversarial Lifting for Domain Shift Correction in Online Test-time Adaptationcited by 4
  26. 2025Towards Harnessing the Collaborative Power of Large and Small Models for Domain Taskscited by 4
  27. 2025DDFP: Data-dependent Frequency Prompt for Source Free Domain Adaptation of Medical Image Segmentationcited by 4
  28. 2025Understanding Model Reprogramming for CLIP via Decoupling Visual Promptscited by 4
  29. 2024Encapsulating Knowledge in One Promptcited by 3
  30. 2024Robust Adaptation of Foundation Models with Black-Box Visual Promptingcited by 3
  31. 2024LLM-wrapper: Black-Box Semantic-Aware Adaptation of Vision-Language Models for Referring Expression Comprehensioncited by 3
  32. 2024Proactive Schemes: A Survey of Adversarial Attacks for Social Goodcited by 2
  33. 2025MetaWriter: Personalized Handwritten Text Recognition Using Meta-Learned Prompt Tuningcited by 2
  34. 2026Adapting in the Dark: Efficient and Stable Test-Time Adaptation for Black-Box Modelscited by 2
  35. 2024Certified PEFTSmoothing: Parameter-Efficient Fine-Tuning with Randomized Smoothingcited by 1
  36. 2024Blackbox Adaptation for Medical Image Segmentationcited by 1
  37. 2024Leveraging Parameter-Efficient Transfer Learning for Multi-Lingual Text-to-Speech Adaptationcited by 1
  38. 2024CPT: Consistent Proxy Tuning for Black-box Optimizationcited by 1

50 most cited of 70 All 70 (JSON)