Project Gradient Descent Adversarial Attack against Multisource Remote Sensing Image Scene Classification

Table 4

Classification accuracy of the AID data set under the untargeted attack.

Models	OA of clean	OA of Xu2020	OA of ours	OA gap of Xu2020	OA gap of ours
VGG-16	90.43  0.27	20.97  0.65	1.31  0.74	−69.46	−89.12
GoogLeNet	91.97  0.28	28.92  0.44	0.42  0.16	−63.05	−91.55
InceptionV3	92.26  0.16	46.80  0.44	4.49  0.47	−45.46	−87.77
ResNet-18	92.22  0.31	16.32  1.13	0.15  0.04	−75.90	−92.07
ResNet-50	93.54  0.14	33.99  1.08	0.23  0.19	−59.55	−93.31
ResNet-101	93.80  0.21	36.47  1.93	0.34  0.15	−57.34	−93.46
DenseNet-121	93.66  0.15	42.93  2.65	0.97  0.12	−50.74	−92.69
DenseNet-201	94.14  0.17	53.88  1.19	2.89  0.80	−40.25	−91.25