Pixel changes

4

0.0080%

8

0.0159%

16

0.0319%

32

0.0638%

64

0.1276%

ResNet

Misclassification

Recognition rate

82

99.18%

116

98.84%

165

98.35%

265

97.35%

416

95.84%

DesNet

Misclassification

Recognition rate

65

99.35%

93

99.07%

157

98.43%

228

97.72%

352

96.48%

VGG

Misclassification

Recognition rate

148

98.52%

220

97.8%

343

96.57%

546

94.54%

798

92.02%

AlexNet

Misclassification

Recognition rate

111

98.89%

149

98.51%

257

97.43%

363

96.37%

587

94.13%

SqueezeNet

Misclassification

Recognition rate

252

97.48%

433

95.67%

680

93.2%

967

90.33%

1395

86.05%