We study digital camera identification based on sensor noise in an adversarial environment with asymmetries. We focus on fingerprint-copy attacks, where the attacker has access to JPEG images only, while the defender may leverage uncompressed images. This leads to the notion of fragile sensor fingerprints that are only available to the defender but do not survive lossy compression. Experiments with seven different cameras suggest a highly reliable detection of the attack as long as no high-quality images are shared with the public.
展开▼
