Research Article
Project Gradient Descent Adversarial Attack against Multisource Remote Sensing Image Scene Classification
Table 7
Classification accuracy of the AID data set under the targeted attack.
| Models | OA of clean | OA of Xu2020 | OA of ours | OA gap of Xu2020 | OA gap of ours |
| VGG-16 | 90.43 0.27 | 25.25 0.41 | 22.55 1.95 | −65.18 | −67.88 | GoogLeNet | 91.97 0.28 | 44.08 0.41 | 19.28 0.74 | −47.89 | −72.69 | InceptionV3 | 92.26 0.16 | 63.56 0.18 | 31.81 0.49 | −28.70 | −60.45 | ResNet-18 | 92.22 0.31 | 29.12 0.86 | 13.92 0.38 | −63.10 | −78.30 | ResNet-50 | 93.54 0.14 | 50.03 0.78 | 17.15 0.41 | −43.51 | −76.39 | ResNet-101 | 93.80 0.21 | 53.76 2.67 | 18.81 0.74 | −40.04 | −75.00 | DenseNet-121 | 93.66 0.15 | 62.80 1.69 | 24.33 1.45 | −30.87 | −69.33 | DenseNet-201 | 94.14 0.17 | 74.03 1.12 | 26.92 1.84 | −20.11 | −67.21 |
|
|