Table 13.

Classification report of raw data after adversarial training under BIM attack algorithm.

	Precision	Recall	F1-score	Support
0	0.98561	0.97857	0.98208	140
1	1.00000	1.00000	1.00000	142
2	0.99383	0.98171	0.98773	164
3	1.00000	1.00000	1.00000	166
4	0.97872	1.00000	0.98925	138
Accuracy			0.99200	750
Macro avg.	0.99163	0.99206	0.99181	750
Weighted avg.	0.99205	0.99200	0.99199	750