paper-with-me

Papers

PRESTO: Preimage-Informed Instruction Optimization for Prompting Black-Box LLMs

2025-10-29 · Jaewon Chu, Seunghun Lee, Hyunwoo J. Kim arxiv

Large language models (LLMs) have achieved remarkable success across diverse domains, due to their strong instruction-following capabilities. This has led to increasing interest in optimizing instructions for black-box LLMs, whose internal parameters are inaccessible but widely used due to their strong performance. To optimize instructions for black-box LLMs, recent methods employ white-box LLMs to generate candidate instructions from optimized soft prompts. However, white-box LLMs often map different soft prompts to the same instruction, leading to redundant queries. While previous studies regarded this many-to-one mapping as a structure that hinders optimization efficiency, we reinterpret it as a useful prior knowledge that can accelerate the optimization. To this end, we introduce PREimage-informed inSTruction Optimization (PRESTO), a novel framework that leverages the preimage structure of soft prompts for efficient optimization. PRESTO consists of three key components: (1) score sharing, which shares the evaluation score with all soft prompts in a preimage; (2) preimage-based initialization, which selects initial data points that maximize search space coverage using preimage information; and (3) score consistency regularization, which enforces prediction consistency within each preimage. By leveraging preimages, PRESTO achieves the effect of effectively obtaining 14 times more scored data under the same query budget, resulting in more efficient optimization. Experimental results on 33 instruction optimization tasks demonstrate the superior performance of PRESTO. Code is available at https://github.com/mlvlab/PRESTO

📄 PDF Abstract BibTeX arXiv:2510.25808

Code (0)

등록된 구현이 없습니다.

Similar Papers 제목 키워드 기반

Using Automatic Generation of Relaxation Constraints to Improve the Preimage Attack on 39-step MD4

2018-02-20 · Gribanova Irina, Semenov Alexander

In this paper we construct preimage attack on the truncated variant of the MD4 hash function. Specifically, we study the MD4-39 function defined by the first 39 steps of the MD4 algorithm. We suggest a new attack on MD4-…

The inverse problem for neural networks

2023-08-27 · Marcelo Forets, Christian Schilling

We study the problem of computing the preimage of a set under a neural network with piecewise-affine activation functions. We recall an old result that the preimage of a polyhedral set is again a union of polyhedral sets…

An Analytical Approach to Compute the Exact Preimage of Feed-Forward Neural Networks

2022-02-28 · Théo Nancy, Vassili Maillet, Johann Barbier

Neural networks are a convenient way to automatically fit functions that are too complex to be described by hand. The downside of this approach is that it leads to build a black-box without understanding what happened in…

Classifier-to-Generator Attack: Estimation of Training Data Distribution from Classifier

2018-01-01 · ICLR 2018 1 · Kosuke Kusano, Jun Sakuma

Suppose a deep classification model is trained with samples that need to be kept private for privacy or confidentiality reasons. In this setting, can an adversary obtain the private samples if the classification model is…

ClassificationFace RecognitionGeneral ClassificationObject Recognition

PREMAP: A Unifying PREiMage APproximation Framework for Neural Networks

2024-08-17 · Xiyue Zhang, Benjie Wang, Marta Kwiatkowska, huan zhang

Most methods for neural network verification focus on bounding the image, i.e., set of outputs for a given input set. This can be used to, for example, check the robustness of neural network predictions to bounded pertur…

image-classificationImage Classification