针对BMP格式掩盖的JPEG同步重压缩检测方法  

Aligned Double JPEG Compression Detection Method Based on BMP Format Masking

作　　者：王金伟 王伟[1,2] 王昊[4] 罗向阳[3,5] 马宾 WANG Jin-Wei;WANG Wei;WANG Hao;LUO Xiang-Yang;MA Bin(Engineering Research Center of Digital Forensics(Nanjing University of Information Science and Technology),Ministry of Education,Nanjing 210044,China;School of Computer Science,Nanjing University of Information Science and Technology,Nanjing 210044,China;State Key Laboratory of Mathematical Engineering and Advanced Computing,Zhengzhou 450001,China;Department of Automation,Nanjing University of Science and Technology,Nanjing 210094,China;PLA Strategic Support Force Information Engineering University,Zhengzhou 450001,China;School of Cyberspace Security,Qilu University of Technology,Jinan 250353,China)

机构地区：[1]数字取证教育部工程研究中心(南京信息工程大学),江苏南京210044 [2]南京信息工程大学计算机学院、网络空间安全学院,江苏南京210044 [3]数学工程与先进计算国家重点实验室,河南郑州450001 [4]南京理工大学自动化学院,江苏南京210094 [5]中国人民解放军战略支援部队信息工程大学,河南郑州450001 [6]齐鲁工业大学网络空间安全学院,山东济南250353

出　　处：《软件学报》2024年第12期5653-5670,共18页Journal of Software

基　　金：国家自然科学基金(62072250,62172435,U1804263,U20B2065,61872203,71802110,61802212);中原科技创新领军人才项目(214200510019);国家重点研发计划(2021QY0700);江苏自然科学基金(BK20200750);河南省网络空间态势感知重点实验室开放基金(HNTS2022002);江苏省研究生研究与实践创新项目(KYCX200974);广东省信息安全技术重点实验室开放项目(2020B1212060078);山东省计算机网络重点实验室开放课题基金(SDKLCN-2022-05);人文社会科学教育部项目(19YJA630061);江苏省研究生科研创新计划(KYCX23_1359)。

摘　　要：检测JPEG(joint photographic experts group)同步重压缩是数字图像取证中一项具有挑战性的任务.已有的研究提出了一些能够有效检测同步JPEG重压缩的方法,但这些方法基本上都是在JPEG解压缩过程中获取的特征,如果以BMP格式保存同步JPEG重压缩图像,则这些方法将难以直接应用.为了解决该问题,提出一种基于双阈值的量化步长估计方法,从而获取量化表并提取特征.此外,根据质量因子100时JPEG压缩的特殊性定义最小误差,通过去除特征中的最小误差,进一步提高特征的检测性能.最后,基于反量化后JPEG系数的收敛特性提取一阶相对误差特征,进一步提高所提方法在质量因子较低时的检测性能.实验结果表明,所提方法在不同质量因子时的性能均优于当前先进算法.Detecting aligned double joint photographic experts group(JPEG)compression is a challenging task in digital image forensics.Previous studies have proposed methods that can effectively detect aligned double JPEG compression,but these methods mostly rely on features extracted during the JPEG decompression process.If the aligned double compressed JPEG image is saved in BMP format,these methods may be difficult to be directly applied.To address this issue,this study proposes a quantization step estimation method based on dual thresholds,which allows for the acquisition of quantization tables and the extraction of features.Furthermore,the study defines a minimum error based on the unique properties of JPEG compression with a quality factor of 100,and by removing the minimum error from the features,the feature detection performance of the proposed method is further improved.Finally,the study extracts first-order relative error features based on the convergence properties of the de-quantized JPEG coefficients,which further enhances the detection performance of the proposed method at lower quality factors.Experimental results demonstrate that the proposed method outperforms current state-of-the-art algorithms at different quality factors.

关 键 词：数字图像取证 JPEG重压缩 量化步长估计 最小误差 收敛特性 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]