Project Gradient Descent Adversarial Attack against Multisource Remote Sensing Image Scene Classification

Table 3

Classification accuracy of the WHU-RS19 data set under the untargeted attack.

Models	OA of clean	OA of Xu2020	OA of ours	OA gap of Xu2020	OA gap of ours
VGG-16	91.03  0.85	17.09  2.79	0.24  0.24	−73.94	−90.79
GoogLeNet	93.25  1.54	31.52  0.73	2.06  0.48	−61.74	−91.19
InceptionV3	91.72  0.57	45.90  1.29	3.69  0.88	−45.82	−88.03
ResNet-18	91.52  1.21	22.42  2.79	1.66  0.44	−69.09	−89.86
ResNet-50	93.90  0.44	41.05  2.75	2.02  1.41	−52.85	−91.88
ResNet-101	92.14  0.87	42.95  0.32	2.06  0.00	−49.19	−90.08
DenseNet-121	93.05  0.69	43.60  1.62	3.64  0.97	−49.45	−89.41
DenseNet-201	94.26  0.53	51.52  3.76	4.81  1.25	−42.75	−89.45