BlackVIP: Black-Box Visual Prompting for Robust Transfer Learning
Not on the map. Why?
Abstract (arXiv)
With the surge of large-scale pre-trained models (PTMs), fine-tuning these models to numerous downstream tasks becomes a crucial problem. Consequently, parameter efficient transfer learning (PETL) of large models has grasped huge attention. While recent PETL methods showcase impressive performance, they rely on optimistic assumptions: 1) the entire parameter set of a PTM is available, and 2) a sufficiently large memory capacity for the fine-tuning is equipped. However, in most real-world applications, PTMs are served as a black-box API or proprietary software without explicit parameter accessibility. Besides, it is hard to meet a large memory requirement for modern PTMs. In this work, we propose black-box visual prompting (BlackVIP), which efficiently adapts the PTMs without knowledge about model architectures and parameters. BlackVIP has two components; 1) Coordinator and 2) simultaneous perturbation stochastic approximation with gradient correction (SPSA-GC). The Coordinator designs input-dependent image-shaped visual prompts, which improves few-shot adaptation and robustness on distribution/location shift. SPSA-GC efficiently estimates the gradient of a target model to update Coordinator. Extensive experiments on 16 datasets demonstrate that BlackVIP enables robust adaptation to diverse domains without accessing PTMs' parameters, with minimal memory requirements. Code: urlhttps://github.com/changdaeoh/BlackVIP
Key facts. Cited by 70 papers in the map (data through 7 Oct 2026). Builds on 63 of its 105 references that are in the map. First posted on arXiv 26 Mar 2023.
Builds on
63 of 105 references.
References · 63
- 2017Attention Is All You Needcited by 59,932
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,160
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2020A Simple Framework for Contrastive Learning of Visual Representationscited by 11,979
- 2019Momentum Contrast for Unsupervised Visual Representation Learningcited by 7,482
- 2021Masked Autoencoders Are Scalable Vision Learnerscited by 7,339
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
38 more
- 2021Emerging Properties in Self-Supervised Vision Transformerscited by 6,893
- 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,690
- 2020Scaling Laws for Neural Language Modelscited by 6,411
- 2020Bootstrap your own latent: A new approach to self-supervised Learningcited by 4,712
- 2019Parameter-Efficient Transfer Learning for NLPcited by 4,195
- 2021Prefix-Tuning: Optimizing Continuous Prompts for Generationcited by 3,878
- 2021Scaling Up Visual and Vision-Language Representation Learning With Noisy Text Supervisioncited by 3,848
- 2021The Power of Scale for Parameter-Efficient Prompt Tuningcited by 3,769
- 2021BEiT: BERT Pre-Training of Image Transformerscited by 2,360
- 2016Xception: Deep Learning with Depthwise Separable Convolutionscited by 2,320
- 2021Learning to Prompt for Vision-Language Modelscited by 2,269
- 2013Describing Textures in the Wildcited by 2,110
- 2021Barlow Twins: Self-Supervised Learning via Redundancy Reductioncited by 1,818
- 2013Fine-Grained Visual Classification of Aircraftcited by 1,701
- 2022Visual Prompt Tuningcited by 1,674
- 2017EuroSAT: A Novel Dataset and Deep Learning Benchmark for Land Use and Land Cover Classificationcited by 1,488
- 2016CLEVR: A Diagnostic Dataset for Compositional Language and Elementary Visual Reasoningcited by 1,445
- 2022Conditional Prompt Learning for Vision-Language Modelscited by 1,427
- 2021SimMIM: A Simple Framework for Masked Image Modelingcited by 1,147
- 2021CLIP-Adapter: Better Vision-Language Models with Feature Adapterscited by 1,021
- 2021Florence: A New Foundation Model for Computer Visioncited by 802
- 2017Remote Sensing Image Scene Classification: Benchmark and State of the Artcited by 791
- 2021Robust fine-tuning of zero-shot modelscited by 785
- 2015The Limitations of Deep Learning in Adversarial Settingscited by 784
- 2020AdapterFusion: Non-Destructive Task Composition for Transfer Learningcited by 780
- 2022Fine-Tuning can Distort Pretrained Features and Underperform Out-of-Distributioncited by 722
- 2022AdaptFormer: Adapting Vision Transformers for Scalable Visual Recognitioncited by 714
- 2022MaPLe: Multi-modal Prompt Learningcited by 685
- 2021FLAVA: A Foundational Language And Vision Alignment Modelcited by 646
- 2022RLPrompt: Optimizing Discrete Text Prompts with Reinforcement Learningcited by 361
- 2021Prompting Visual-Language Models for Efficient Video Understandingcited by 309
- 2022Black-Box Tuning for Language-Model-as-a-Servicecited by 254
- 2022Visual Prompting via Image Inpaintingcited by 248
- 2019Adversarial Attacks and Defenses in Images, Graphs and Text: A Reviewcited by 234
- 2022Surgical Fine-Tuning Improves Adaptation to Distribution Shiftscited by 205
- 2019Learning De-biased Representations with Biased Representationscited by 199
- 2020A Primer on Zeroth-Order Optimization in Signal Processing and Machine Learningcited by 160
- 2022Unified Vision and Language Prompt Learningcited by 145
50 most cited of 63 All 63 (JSON)
Built on by
Citing papers per year: 2023: 12; 2024: 28; 2025: 18; 2026: 12.
70 papers.
Sort:
By area:
- 2023Batch Calibration: Rethinking Calibration for In-Context Learning and Prompt Engineeringcited by 91
- 2024Visual Prompting in Multimodal Large Language Models: A Surveycited by 52
- 2023SD4Match: Learning to Prompt Stable Diffusion Model for Semantic Matchingcited by 38
- 2023Language Models as Black-Box Optimizers for Vision-Language Modelscited by 36
- 2024Facing the Elephant in the Room: Visual Prompt Tuning or Full Finetuning?cited by 31
- 2023Instruct Me More! Random Prompting for Visual In-Context Learningcited by 30
- 2023AutoVP: An Automated Visual Prompting Framework and Benchmarkcited by 29
- 2025Visual Instance-aware Prompt Tuningcited by 29
- 2023Understanding and Mitigating the Label Noise in Pre-training on Downstream Taskscited by 27
- 2024CoLLaVO: Crayon Large Language and Vision mOdelcited by 26
- 2023Grounding Foundation Models through Federated Transfer Learning: A General Frameworkcited by 24
- 2024Adapting to Distribution Shift by Visual Domain Prompt Generationcited by 23
38 more
- 2025Prompt-based Adaptation in Large-scale Vision Models: A Surveycited by 21
- 2025LoR-VP: Low-Rank Visual Prompting for Efficient Vision Model Adaptationcited by 17
- 2024On Catastrophic Inheritance of Large Foundation Modelscited by 15
- 2024Exploring the Transferability of Visual Prompting for Multimodal Large Language Modelscited by 15
- 2024PACE: Marrying generalization in PArameter-efficient fine-tuning with Consistency rEgularizationcited by 14
- 2023Efficient Federated Prompt Tuning for Black-box Large Pre-trained Modelscited by 12
- 2024Bayesian-guided Label Mapping for Visual Reprogrammingcited by 12
- 2025ProAPO: Progressively Automatic Prompt Optimization for Visual Classificationcited by 12
- 2023Cloud-Device Collaborative Learning for Multimodal Large Language Modelscited by 11
- 2024Derivative-Free Optimization for Low-Rank Adaptation in Large Language Modelscited by 11
- 2024UPAM: Unified Prompt Attack in Text-to-Image Generation Models Against Both Textual Filters and Visual Checkerscited by 11
- 2024Subgraph-level Universal Prompt Tuningcited by 9
- 2025Re-Imagining Multimodal Instruction Tuning: A Representation Viewcited by 9
- 2025Test-Time Model Adaptation for Quantized Neural Networkscited by 9
- 2024Impact of Noisy Supervision in Foundation Model Learningcited by 8
- 2024Learning Visual Conditioning Tokens to Correct Domain Shift for Fully Test-time Adaptationcited by 7
- 2025Attribute-based Visual Reprogramming for Vision-Language Modelscited by 7
- 2023Black-Box Tuning of Vision-Language Models with Effective Gradient Approximationcited by 6
- 2024Forget Vectors at Play: Universal Input Perturbations Driving Machine Unlearning in Image Classificationcited by 6
- 2025Confidence-calibrated covariate shift correction for few-shot classification in Vision-Language Modelscited by 6
- 2023Towards Robust and Accurate Visual Promptingcited by 5
- 2024Black-Box Forgettingcited by 5
- 2024Poor Man's Training on MCUs: A Memory-Efficient Quantized Back-Propagation-Free Approachcited by 5
- 2025Unified Prompt Attack Against Text-to-Image Generation Modelscited by 5
- 2024Dual-Path Adversarial Lifting for Domain Shift Correction in Online Test-time Adaptationcited by 4
- 2025Towards Harnessing the Collaborative Power of Large and Small Models for Domain Taskscited by 4
- 2025DDFP: Data-dependent Frequency Prompt for Source Free Domain Adaptation of Medical Image Segmentationcited by 4
- 2025Understanding Model Reprogramming for CLIP via Decoupling Visual Promptscited by 4
- 2024Encapsulating Knowledge in One Promptcited by 3
- 2024Robust Adaptation of Foundation Models with Black-Box Visual Promptingcited by 3
- 2024LLM-wrapper: Black-Box Semantic-Aware Adaptation of Vision-Language Models for Referring Expression Comprehensioncited by 3
- 2024Proactive Schemes: A Survey of Adversarial Attacks for Social Goodcited by 2
- 2025MetaWriter: Personalized Handwritten Text Recognition Using Meta-Learned Prompt Tuningcited by 2
- 2026Adapting in the Dark: Efficient and Stable Test-Time Adaptation for Black-Box Modelscited by 2
- 2024Certified PEFTSmoothing: Parameter-Efficient Fine-Tuning with Randomized Smoothingcited by 1
- 2024Blackbox Adaptation for Medical Image Segmentationcited by 1
- 2024Leveraging Parameter-Efficient Transfer Learning for Multi-Lingual Text-to-Speech Adaptationcited by 1
- 2024CPT: Consistent Proxy Tuning for Black-box Optimizationcited by 1
50 most cited of 70 All 70 (JSON)
- 2026Reprogramming Vision-Language Models via Structured Prompt Reparameterization29 Sep 2026
- 2026You Only Reprogram Once: Rethinking Prolonged Training for Visual Reprogramming29 Sep 2026
- 2026ZOMP: Zeroth-Order Multi-Modal Prompt Tuning for Vision-Language Models8 Aug 2026
- 2026Grad-CAM for Vision Transformers: A Systematic Taxonomy and Audit of Methodological Ambiguity in Explainable AI5 Aug 2026
- 2026Continual Test-Time Adaptation in Computer Vision: Methods, Benchmarks, and Future Directions9 Jul 2026
- 2026BioMedVR: Confusion-Aware Mixture-of-Prompt Experts for Biomedical Visual Reprogramming23 Jun 2026
- 2026Black-Box Continual Learning for Vision-Language Models22 Jun 2026
- 2026Beyond Low-Rank: Low-Rank Sparse Prompting via Spiking Neural Network and Prompt Factorization1 Jun 2026
- 2026Guided Trajectory Optimization with Sparse Scaling for Test-Time Diffusion21 May 2026
- 2026P3T: Prototypical Point-level Prompt Tuning with Enhanced Generalization for 3D Vision-Language Models17 Apr 2026
- 2026Adapting in the Dark: Efficient and Stable Test-Time Adaptation for Black-Box Models17 Apr 2026
- 2026When Visual Privacy Protection Meets Multimodal Large Language Models14 Mar 2026
38 more
- 2025UI-Styler: Ultrasound Image Style Transfer with Class-Aware Prompts for Cross-Device Diagnosis Using a Frozen Black-Box Inference Network21 Nov 2025
- 2025Prompt-based Adaptation in Large-scale Vision Models: A Survey15 Oct 2025
- 2025Enhancing Visual Prompting through Expanded Transformation Space and Overfitting Mitigation9 Oct 2025
- 2025Test-Time Model Adaptation for Quantized Neural Networks4 Aug 2025
- 2025Visual Instance-aware Prompt Tuning10 Jul 2025
- 2025Exploring Visual Prompting: Robustness Inheritance and Beyond7 Jun 2025
- 2025Understanding Model Reprogramming for CLIP via Decoupling Visual Prompts1 Jun 2025
- 2025MetaWriter: Personalized Handwritten Text Recognition Using Meta-Learned Prompt Tuning26 May 2025
- 2025DDFP: Data-dependent Frequency Prompt for Source Free Domain Adaptation of Medical Image Segmentation15 May 2025
- 2025Promoting SAM for Camouflaged Object Detection via Selective Key Point-based Guidance14 May 2025
- 2025E-InMeMo: Enhanced Prompting for Visual In-Context Learning25 Apr 2025
- 2025Towards Harnessing the Collaborative Power of Large and Small Models for Domain Tasks24 Apr 2025
- 2025Re-Imagining Multimodal Instruction Tuning: A Representation View2 Mar 2025
- 2025ProAPO: Progressively Automatic Prompt Optimization for Visual Classification27 Feb 2025
- 2025Unified Prompt Attack Against Text-to-Image Generation Models23 Feb 2025
- 2025Confidence-calibrated covariate shift correction for few-shot classification in Vision-Language Models11 Feb 2025
- 2025LoR-VP: Low-Rank Visual Prompting for Efficient Vision Model Adaptation2 Feb 2025
- 2025Attribute-based Visual Reprogramming for Vision-Language Models23 Jan 2025
- 2024Forget Vectors at Play: Universal Input Perturbations Driving Machine Unlearning in Image Classification21 Dec 2024
- 2024Poor Man's Training on MCUs: A Memory-Efficient Quantized Back-Propagation-Free Approach7 Nov 2024
- 2024Black-Box Forgetting1 Nov 2024
- 2024Federated Black-Box Adaptation for Semantic Segmentation31 Oct 2024
- 2024Bayesian-guided Label Mapping for Visual Reprogramming31 Oct 2024
- 2024PACE: Marrying generalization in PArameter-efficient fine-tuning with Consistency rEgularization25 Sep 2024
- 2024Proactive Schemes: A Survey of Adversarial Attacks for Social Good24 Sep 2024
- 2024LLM-wrapper: Black-Box Semantic-Aware Adaptation of Vision-Language Models for Referring Expression Comprehension18 Sep 2024
- 2024Visual Prompting in Multimodal Large Language Models: A Survey5 Sep 2024
- 2024Dual-Path Adversarial Lifting for Domain Shift Correction in Online Test-time Adaptation26 Aug 2024
- 2024MePT: Multi-Representation Guided Prompt Tuning for Vision-Language Model19 Aug 2024
- 2024Training Spatial-Frequency Visual Prompts and Probabilistic Clusters for Accurate Black-Box Transfer Learning15 Aug 2024
- 2024Encapsulating Knowledge in One Prompt16 Jul 2024
- 2024Robust Adaptation of Foundation Models with Black-Box Visual Prompting4 Jul 2024
- 2024CPT: Consistent Proxy Tuning for Black-box Optimization1 Jul 2024
- 2024Learning Visual Conditioning Tokens to Correct Domain Shift for Fully Test-time Adaptation27 Jun 2024
- 2024Leveraging Parameter-Efficient Transfer Learning for Multi-Lingual Text-to-Speech Adaptation25 Jun 2024
- 2024UPAM: Unified Prompt Attack in Text-to-Image Generation Models Against Both Textual Filters and Visual Checkers18 May 2024
- 2024Blackbox Adaptation for Medical Image Segmentation17 May 2024
- 2024Adapting to Distribution Shift by Visual Domain Prompt Generation5 May 2024
50 newest of 70 All 70 (JSON)
- 2024Visual Prompting in Multimodal Large Language Models: A Surveycited by 52
- 2023Language Models as Black-Box Optimizers for Vision-Language Modelscited by 36
- 2024CoLLaVO: Crayon Large Language and Vision mOdelcited by 26
- 2024Exploring the Transferability of Visual Prompting for Multimodal Large Language Modelscited by 15
- 2025ProAPO: Progressively Automatic Prompt Optimization for Visual Classificationcited by 12
- 2025Re-Imagining Multimodal Instruction Tuning: A Representation Viewcited by 9
- 2025Attribute-based Visual Reprogramming for Vision-Language Modelscited by 7
- 2023Black-Box Tuning of Vision-Language Models with Effective Gradient Approximationcited by 6
- 2025Confidence-calibrated covariate shift correction for few-shot classification in Vision-Language Modelscited by 6
- 2024LLM-wrapper: Black-Box Semantic-Aware Adaptation of Vision-Language Models for Referring Expression Comprehensioncited by 3
- 2024MePT: Multi-Representation Guided Prompt Tuning for Vision-Language Modelcited by 1
- 2026ZOMP: Zeroth-Order Multi-Modal Prompt Tuning for Vision-Language Modelscited by 1
12 most cited of 18 All 18 (JSON)
- 2026Reprogramming Vision-Language Models via Structured Prompt Reparameterization29 Sep 2026
- 2026ZOMP: Zeroth-Order Multi-Modal Prompt Tuning for Vision-Language Models8 Aug 2026
- 2026BioMedVR: Confusion-Aware Mixture-of-Prompt Experts for Biomedical Visual Reprogramming23 Jun 2026
- 2026Black-Box Continual Learning for Vision-Language Models22 Jun 2026
- 2026P3T: Prototypical Point-level Prompt Tuning with Enhanced Generalization for 3D Vision-Language Models17 Apr 2026
- 2026When Visual Privacy Protection Meets Multimodal Large Language Models14 Mar 2026
- 2025Re-Imagining Multimodal Instruction Tuning: A Representation View2 Mar 2025
- 2025ProAPO: Progressively Automatic Prompt Optimization for Visual Classification27 Feb 2025
- 2025Confidence-calibrated covariate shift correction for few-shot classification in Vision-Language Models11 Feb 2025
- 2025Attribute-based Visual Reprogramming for Vision-Language Models23 Jan 2025
- 2024LLM-wrapper: Black-Box Semantic-Aware Adaptation of Vision-Language Models for Referring Expression Comprehension18 Sep 2024
- 2024Visual Prompting in Multimodal Large Language Models: A Survey5 Sep 2024
12 newest of 18 All 18 (JSON)
- 2024Facing the Elephant in the Room: Visual Prompt Tuning or Full Finetuning?cited by 31
- 2023Instruct Me More! Random Prompting for Visual In-Context Learningcited by 30
- 2023AutoVP: An Automated Visual Prompting Framework and Benchmarkcited by 29
- 2025Visual Instance-aware Prompt Tuningcited by 29
- 2023Understanding and Mitigating the Label Noise in Pre-training on Downstream Taskscited by 27
- 2023Grounding Foundation Models through Federated Transfer Learning: A General Frameworkcited by 24
- 2024Adapting to Distribution Shift by Visual Domain Prompt Generationcited by 23
- 2025Prompt-based Adaptation in Large-scale Vision Models: A Surveycited by 21
- 2025LoR-VP: Low-Rank Visual Prompting for Efficient Vision Model Adaptationcited by 17
- 2024On Catastrophic Inheritance of Large Foundation Modelscited by 15
- 2024PACE: Marrying generalization in PArameter-efficient fine-tuning with Consistency rEgularizationcited by 14
- 2023Efficient Federated Prompt Tuning for Black-box Large Pre-trained Modelscited by 12
12 most cited of 46 All 46 (JSON)
- 2026You Only Reprogram Once: Rethinking Prolonged Training for Visual Reprogramming29 Sep 2026
- 2026Grad-CAM for Vision Transformers: A Systematic Taxonomy and Audit of Methodological Ambiguity in Explainable AI5 Aug 2026
- 2026Continual Test-Time Adaptation in Computer Vision: Methods, Benchmarks, and Future Directions9 Jul 2026
- 2026Beyond Low-Rank: Low-Rank Sparse Prompting via Spiking Neural Network and Prompt Factorization1 Jun 2026
- 2026Adapting in the Dark: Efficient and Stable Test-Time Adaptation for Black-Box Models17 Apr 2026
- 2025UI-Styler: Ultrasound Image Style Transfer with Class-Aware Prompts for Cross-Device Diagnosis Using a Frozen Black-Box Inference Network21 Nov 2025
- 2025Prompt-based Adaptation in Large-scale Vision Models: A Survey15 Oct 2025
- 2025Enhancing Visual Prompting through Expanded Transformation Space and Overfitting Mitigation9 Oct 2025
- 2025Test-Time Model Adaptation for Quantized Neural Networks4 Aug 2025
- 2025Visual Instance-aware Prompt Tuning10 Jul 2025
- 2025Exploring Visual Prompting: Robustness Inheritance and Beyond7 Jun 2025
- 2025Understanding Model Reprogramming for CLIP via Decoupling Visual Prompts1 Jun 2025
12 newest of 46 All 46 (JSON)