Project Gradient Descent Adversarial Attack against Multisource Remote Sensing Image Scene Classification

Table 6

Classification accuracy of the WHU-RS19 data set under the targeted attack.

Models	OA of clean	OA of Xu2020	OA of ours	OA gap of Xu2020	OA gap of ours
VGG-16	91.03  0.85	30.83  2.30	26.61  1.74	−60.20	−64.42
GoogLeNet	93.25  1.54	47.80  1.42	22.49  0.76	−45.45	−70.76
InceptionV3	91.72  0.57	57.02  1.02	31.45  0.75	−34.70	−60.27
ResNet-18	91.52  1.21	37.46  1.65	15.91  1.14	−54.05	−75.60
ResNet-50	93.90  0.44	51.64  3.20	24.42  2.19	−42.25	−69.48
ResNet-101	92.14  0.87	54.72  1.02	27.58  1.65	−37.43	−64.56
DenseNet-121	93.05  0.69	59.63  1.66	28.05  0.24	−33.42	−65.00
DenseNet-201	94.26  0.53	65.18  2.50	32.53  0.64	−29.08	−61.73