Project Gradient Descent Adversarial Attack against Multisource Remote Sensing Image Scene Classification

Table 7

Classification accuracy of the AID data set under the targeted attack.

Models	OA of clean	OA of Xu2020	OA of ours	OA gap of Xu2020	OA gap of ours
VGG-16	90.43  0.27	25.25  0.41	22.55  1.95	−65.18	−67.88
GoogLeNet	91.97  0.28	44.08  0.41	19.28  0.74	−47.89	−72.69
InceptionV3	92.26  0.16	63.56  0.18	31.81  0.49	−28.70	−60.45
ResNet-18	92.22  0.31	29.12  0.86	13.92  0.38	−63.10	−78.30
ResNet-50	93.54  0.14	50.03  0.78	17.15  0.41	−43.51	−76.39
ResNet-101	93.80  0.21	53.76  2.67	18.81  0.74	−40.04	−75.00
DenseNet-121	93.66  0.15	62.80  1.69	24.33  1.45	−30.87	−69.33
DenseNet-201	94.14  0.17	74.03  1.12	26.92  1.84	−20.11	−67.21