Apple's Synthetic Defocus Noise Pattern: Characterization and Forensic Applications

TL;DR

This paper characterizes Apple's Synthetic Defocus Noise Pattern in iPhone portrait images, explores its forensic applications for device identification, and demonstrates how masking it improves camera source verification accuracy.

Contribution

It provides the first detailed analysis and modeling of SDNP, enabling new forensic methods for device attribution and reducing false positives in PRNU-based verification.

Findings

SDNP can be precisely estimated and modeled based on scene brightness and ISO.

Masking SDNP regions reduces false positives in camera source verification.

SDNP enables cross-model and cross-iOS version traceability of portrait images.

Abstract

iPhone portrait-mode images contain a distinctive pattern in out-of-focus regions simulating the bokeh effect, which we term Apple's Synthetic Defocus Noise Pattern (SDNP). If overlooked, this pattern can interfere with blind forensic analyses, especially PRNU-based camera source verification, as noted in earlier works. Since Apple's SDNP remains underexplored, we provide a detailed characterization, proposing a method for its precise estimation, modeling its dependence on scene brightness, ISO settings, and other factors. Leveraging this characterization, we explore forensic applications of the SDNP, including traceability of portrait-mode images across iPhone models and iOS versions in open-set scenarios, assessing its robustness under post-processing. Furthermore, we show that masking SDNP-affected regions in PRNU-based camera source verification significantly reduces false positives, overcoming a critical limitation in camera attribution, and improving state-of-the-art techniques.