Project Gradient Descent Adversarial Attack against Multisource Remote Sensing Image Scene Classification

Table 2

Classification accuracy of the UCM data set under the untargeted attack.

Models	OA of clean	OA of Xu2020	OA of ours	OA gap of Xu2020	OA gap of ours
VGG-16	91.15  1.03	24.46  0.95	4.84  0.73	−66.69	−86.31
GoogLeNet	95.52  0.62	37.32  1.73	5.93  0.75	−58.19	−89.58
InceptionV3	94.78  0.32	57.24  1.03	10.00  1.25	−37.54	−84.78
ResNet-18	94.80  0.22	31.05  1.33	1.92  1.14	−63.75	−92.88
ResNet-50	96.27  0.10	51.29  1.27	2.60  1.21	−44.98	−93.67
ResNet-101	96.15  0.26	50.22  4.27	2.66  0.62	−45.93	−93.49
DenseNet-121	95.58  0.67	50.08  1.53	5.73  1.51	−45.50	−89.84
DenseNet-201	95.91  0.73	51.62  0.68	5.65  1.55	−44.29	−90.26