Anti-Forensic PRNU Suppression
Definition
Deliberate actions to remove or obscure the PRNU fingerprint, such as adding PRNU-erasing noise, applying heavy lossy compression, or scaling and re-cropping the image. Such actions can be detected but may succeed in preventing attribution.
- Methods
- PRNU-erasing noise, heavy lossy compression, scaling/re-cropping
- Goal
- Remove or obscure the sensor's PRNU fingerprint
- Outcome
- Detectable but may still defeat attribution
- Field
- Digital image forensics
Common questions
How can an examiner detect that PRNU suppression was attempted?+
Suppression often leaves statistical artefacts, such as an unusually flat or altered noise distribution compared to typical camera noise, or inconsistencies between the claimed source camera's known PRNU pattern and the image, which trained analysis can flag even when the fingerprint itself is gone.
Why does detecting suppression not always restore attribution?+
Recognising that an image was tampered with tells the examiner attribution cannot be trusted, but it does not recover the original PRNU pattern once it has been sufficiently degraded, so the source camera link is lost even though the manipulation itself is provable.
Related terms
- Base Rate Problem
- The statistical challenge facing any deception-detection method: if only a minority of statements examined are actually deceptive, even a method that is...
- Individual vs Device-Class Attribution
- Individual attribution identifies one specific camera body. Device-class attribution identifies only the make or model. PRNU provides individual attribution; metadata and lens-distortion...
- PRNU Suppression
- Any processing that reduces the usable PRNU signal in an image: heavy JPEG compression, resolution downscaling, in-camera noise reduction, social-media re-encoding, and...
- Shared Device Model
- The scenario in which multiple individuals use the same camera. The PRNU fingerprint links an image to the device, not to any...
- Uncertainty Quantification in PRNU
- Expressing a PRNU attribution result not just as a binary yes/no but with stated PCE values, false-positive rate at the threshold used,...