Pixel changes | 4 0.0080% | 8 0.0159% | 16 0.0319% | 32 0.0638% | 64 0.1276% | |
ResNet | Misclassification Recognition rate | 82 99.18% | 116 98.84% | 165 98.35% | 265 97.35% | 416 95.84% |
DesNet | Misclassification Recognition rate | 65 99.35% | 93 99.07% | 157 98.43% | 228 97.72% | 352 96.48% |
VGG | Misclassification Recognition rate | 148 98.52% | 220 97.8% | 343 96.57% | 546 94.54% | 798 92.02% |
AlexNet | Misclassification Recognition rate | 111 98.89% | 149 98.51% | 257 97.43% | 363 96.37% | 587 94.13% |
SqueezeNet | Misclassification Recognition rate | 252 97.48% | 433 95.67% | 680 93.2% | 967 90.33% | 1395 86.05% |