Statistical feature-based steganalysis for pixel-value differencing steganography

Abstract

Pixel-value differencing (PVD) steganography is a popular spatial domain technology. Several PVD-based studies have proposed extended PVD steganography methods. The majority of these studies have verified their security against the regular-singular (RS) analysis. However, RS analysis is aimed at the feature of the least significant bit substitution method, which is relatively less significant for PVD steganography. The pixel difference histogram (PDH) is generally utilized to attack PVD steganography. If the embedding capacity is high, then the features on the PDH are evident; otherwise, the features are less obvious. In this paper, we propose a statistical feature-based steganalysis technique for the original PVD steganography. Experimental results demonstrate that, compared with existing steganalysis technique with weighted stego-image (WS) method, the proposed method effectively detects PVD steganography at low embedding ratios, such that there is no need of using the original embedding parameters. Furthermore, the accuracy and precision of the method are better than those of existing PVD steganalysis techniques. Therefore, the proposed method contributes to the security analysis of the original PVD steganography as an alternative to the commonly used RS, PDH and WS attack techniques.

1 Introduction

Cryptography and steganography are used to protect and secure information. Encryption algorithms protect secret data by converting it into unreadable data; however, such unreadable and incomprehensible data are likely to draw the attention of criminals. Steganography can conceal data in carriers without changing the original data. Common carriers include videos, audios, texts, and images. Compared with other carriers, digital images have considerable amount of redundant space. Therefore, digital images are commonly used for steganography and are called cover images (before embedding secret messages); similarly, images with embedded messages are called stego images. Steganography techniques can be categorized into spatial and frequency domains. In terms of image quality, the embedding capacity in the spatial domain is higher than that in the frequency domain. Therefore, the spatial domain is suitable for a large number of embedded messages. In the spatial domain, the least significant bit (LSB) substitution steganography [1], proposed in 1996, is the most popular steganography technique. Here, the LSB bit of a pixel value is directly substituted by secret bitstreams. However, LSB substitution steganography can be detected using regular-singular (RS) analysis [2].

Pixel-value differencing (PVD) steganography [3] was developed based on the edge areas in an image; it can conceal more secret messages compared to those in smooth areas. Based on this principle, PVD steganography determines the amount of messages to be embedded depending on the value of the difference between adjacent pixels. Although this method provides a high embedding capacity and invisibility, it creates a step-like shape in the pixel difference histogram (PDH), and embedded messages may be detected. A modified PVD (MPVD) steganography was proposed by Zhang et al. [4], which dynamically generates the PVD interval range to improve security.

In recent years, many scholars have proposed PVD-based methods and have verified their safety via RS analysis. For instance, a hybrid method was proposed [5] using LSB steganography in smooth areas and PVD steganography in edge areas. In other studies [6,7,8,9,10,11,12,13,14,15], the combination of PVD and LSB techniques has been proposed to obtain a large embedding capacity. In addition, other hybrid methods have been proposed to offer a high embedding capacity, such as PVD combined with the side-match method [16] or exploiting modification directions [17, 18].

Because PVD steganography does not make full use of edge areas, a tri-way PVD (TPVD) steganography was proposed by Chang et al. [19], which utilizes three different directional edges to improve the embedding capacity. To achieve a higher embedding capacity, many studies [20,21,22,23,24,25] used PVD with LSB techniques in multi-directional edges. Afterward, to provide a good image quality, a PVD steganography technique using the modulus function (MFPVD) was proposed by Wang et al. [26]. This method utilizes the concept of congruence modulo to adjust the remainder of two consecutive pixels and match the message value. Many scholars have utilized this concept to formulate related studies [27,28,29,30,31,32,33,34].

With the popularity of steganography, a field of steganalysis was generated that is aimed at detecting the presence of embedding data in a stego image. Recently, most studies on steganalysis have mainly used machine learning and deep learning methods [35,36,37,38,39]. Many steganalysis techniques with multidimensional features have been proposed to improve the performance of detection; however, these techniques utilize multiple complex processes and computational resources. In addition, steganalysis schemes can be classified into universal or specific. The universal steganalysis scheme is designed to detect embedding messages regardless of the steganography technique used, such as deep learning methods. In contrast, specific steganalysis scheme aims to detect known steganography.

The steganalysis of the original PVD steganography [3] was first proposed by Zhang et al. [4], which made the step effects of the PDH and detected embedding messages. In 2019, Zhang et al. [40] proposed PVD noise steganalysis with weighted stego image (WS) steganalysis to detect the embedding capacity of the original PVD steganography, but the original steganography parameters need to be obtained. MPVD steganography [4] overcomes the step effects of the original PVD steganography, but it was detected through a one-more-time embedding [41,42,43] and revealed the features of the difference between before and after embedding messages.

In addition, the steganalysis of TPVD steganography was proposed by Zaker et al. [44], which utilized the vulnerability from the PDH of stego images under TPVD steganography. Subsequently, because the embedding process of MFPVD steganography [26] generates fluctuations and growing abnormalities, the asymmetry on the PDH is created. The steganalysis of MFPVD [26] was proposed by Joo et al. [45], which utilizes these features to detect the embedding messages.

The above PVD-based studies are extensions of the traditional PVD steganography techniques [3]. These techniques have only verified their security against RS analysis. However, RS analysis is aimed at the feature of the LSB substitution method [2], which is relatively less significant for PVD steganography [3]. In addition, the PDH method [4] and WS technique [40] are commonly used to detect the original PVD steganography [3]. In existing studies, the PDH method has been commonly used for PVD-based steganalysis; however, its effectiveness is limited in low embedding ratios.

Therefore, we propose a statistical feature-based method for steganalysis of the original PVD steganography [3]. Compared with the state-of-the-art steganalysis [40], the proposed method is more accurate and precise at low embedding ratios and can be performed without obtaining the original embedding parameters.

This article is organized as follows: Sect. 2 describes the related techniques. Section 3 details our proposed steganalysis of the original PVD steganography. Section 4 presents the experimental results and discussion. Finally, Sect. 5 shows the conclusions.

2 Related works

2.1 PVD steganography

PVD steganography was proposed by Wu et al. [3]. The concept is based on small changes in smooth areas, which are more easily detected by the human eye compared to the edge areas. Therefore, when secret data are embedded, a large change between the pixels in the edge area can be applied, thereby allowing a large amount of secret data to be embedded in the edge area. The embedding process is described as follows:

First, cover images divided every two consecutive and non-overlapped pixels in a zigzag manner into the embedding block. We assume that the values of pixels in the embedding blocks are $p_{i}$ and $p_{i + 1}$, respectively, and the difference value $d$ between the two pixels in each block is computed as $p_{i + 1} - p_{i}$.The difference value $d$ lies between − 255 and 255. Based on the embedding capacity and image quality requirements, two types of PVD interval classification tables are designed (i.e., Tables 1 and 2). Tables 1 and 2 indicate the absolute value of the difference, which is divided into many continuous ranges $R_{k}$, where the interval index value, lower bound, upper bound, and width of the range are defined as $k$,$l_{k}$,$u_{k}$, and $w_{k}$, respectively. The width of the range is a power of 2, and the value is $w_{k} = u_{k} - l_{k} + 1$. The number of embedding bits $n$ is determined by the width of the PVD interval, as shown in Eq. (1):

$$n = \log_{2} \left( {w_{k} } \right)$$

(1)

Table 1 Type 1 of the PVD interval classification table

Table 2 Type 2 of the PVD interval classification table

Table 1 indicates type 1 of the PVD interval classification table. The width of each PVD interval is large, which can embed a large number of bits and is commonly used in steganography and steganalysis. Table 2 indicates type 2 of the PVD interval classification table. The width of each PVD interval is small, which embeds a small number of bits; however, the quality of the stego image is better. Subsequently, the secret bits $n$ are converted into a decimal value $b$, and the new difference value $d^{\prime}$ is calculated as follows:

$$d^{{\prime }} = \left\{ {\begin{array}{*{20}l} {l_{k} + b,} \hfill & {{\text{if}}\;d \ge 0} \hfill \\ { - \left( {l_{k} + b} \right),} \hfill & {{\text{if}}\;d < 0} \hfill \\ \end{array} } \right.$$

(2)

Let the values of pixels in the stego image be $p^{\prime}_{i}$ and $p^{\prime}_{i + 1}$. The embedding procedure is presented as follows:

$$\left( {p^{\prime}_{i} ,p^{\prime}_{i + 1} } \right) = \left\{ {\begin{array}{*{20}c} \begin{gathered} \left( {p_{i} - \left\lceil {\frac{{d^{\prime} - d}}{2}} \right\rceil ,p_{i + 1} + \left\lfloor {\frac{{d^{\prime} - d}}{2}} \right\rfloor } \right), \hfill \\ {\text{if}}\;d\;{\text{is}}\;{\text{odd, }} \hfill \\ \;\;\; \hfill \\ \end{gathered} \\ \begin{gathered} \left( {p_{i} - \left\lfloor {\frac{{d^{\prime} - d}}{2}} \right\rfloor ,p_{i + 1} + \left\lceil {\frac{{d^{\prime} - d}}{2}} \right\rceil } \right),\; \hfill \\ {\text{if}}\;d\;{\text{is}}\;{\text{even}} \hfill \\ \end{gathered} \\ \end{array} } \right.$$

(3)

where ⌈ ⌉ is the ceiling function to round toward infinity and ⌊ ⌋ is the floor function to round toward minus infinity.

Overall, the secret bits are embedded in the PVD of each pixel pair through PVD steganography, which is not the same as the LSB substitute steganography [1].

2.2 WS steganalysis

Zhang et al. [40] proposed a WS steganalysis method for the original PVD steganography [3]. In this method, the feature of the stego noise in sum value images is similar to that of LSB substitution steganography [1]. This method only involves normal embedding blocks, which are denoted by A. The maximal embedding rate in bits per pixel is presented in Eq. (4):

$$r_{\max } = \frac{\left| A \right|}{{2N}}\sum\limits_{k \in Z6} {P(\left| {d_{i} } \right|} \in R_{k} |i \in A)\log_{2} (w_{k} ),$$

(4)

where N is the number of pixel pairs.

The estimator of a cover image is denoted as $\hat{c}$, and it is obtained using a local linear predictor with fixed forms, as shown in Eq. (5).

$$T = \left[ {\begin{array}{*{20}c} { - \frac{1}{4}} & \frac{1}{2} & { - \frac{1}{4}} \\ \frac{1}{2} & 0 & \frac{1}{2} \\ { - \frac{1}{4}} & \frac{1}{2} & { - \frac{1}{4}} \\ \end{array} } \right]$$

(5)

Then, the residuals $r_{i}$ are calculated as follows:

$$r_{i} = \left( {s_{i} - \tilde{s}_{i} } \right)(s_{i} - \hat{c}_{i} ),\;i \in A,$$

(6)

where $\tilde{s}_{i}$ indicates the flipped LSB value of the stego pixel.

If $\sigma^{2}$ is the variance of estimator $\hat{c}_{i}$, then the weighted function is calculated as follows:

$$w(\sigma^{2} ) = \frac{1}{{\lambda + \sigma^{2} }},$$

(7)

where $\lambda$ is a constant ($\lambda$ = 5) [40].

WS residuals in the sum value of the stego image are calculated, and the LSB substitution embedding rate is estimated using Eq. (8).

$$\hat{p} = \frac{{2\sum\limits_{{i \in {\text{A}}}} {w(\sigma_{i} )r_{i} } }}{{\sum\limits_{i \in A} {w(\sigma_{i} )} }},$$

(8)

where $\hat{p}$ is used to estimate a PVD embedding rate as follows:

$$\hat{r} = r_{\max } \hat{p} = \frac{{2r_{\max } \sum\limits_{{i \in {\text{A}}}} {w(\sigma_{i} )r_{i} } }}{{\sum\limits_{i \in A} {w(\sigma_{i} )} }}$$

(9)

If $\hat{r} < 0,$ then $\hat{r}$ must be corrected to be zero. However, if $\hat{r} > r_{\max } ,$ then $\hat{r}$ must be corrected to be $r_{\max }$. This method indicates that estimators are sensitive to the sample size and relative embedding ratios. Therefore, the performance of the best WS estimator is employed according to the embedding parameters.

3 Proposed steganalysis technique

In this section, we describe our method for steganalysis of the original PVD steganography [3]. This method involves two phases: the first phase is the drawback analysis of PVD steganography in Sect. 3.1, and the second phase is the detection of PVD steganography based on the drawbacks presented in Sect. 3.2. The difference value between pixel pairs is denoted as $x$. The original images with 1,000 images are used from the Break Our Steganographic System (BOSS) database [46] with 10,000 grayscale image sets that are 512 $\times$ 512 pixels in size. The histograms of PVD in the cover and stego images are defined as $h(x)$ and $h^{\prime}(x)$, respectively, and the bin range in the histogram is from − 32 to 32.

3.1 Analyses of PVD steganography

In this section, we analyze the features of PVD distribution between the cover image and stego image and distinguish the difference between the original image and hidden image. In this study, the secret bitstreams were randomly generated with zeroes and ones and are approximately uniformly distributed. The stego images were embedded messages from the PVD steganography [3]. The analytical process is proposed, as shown in Fig. 1.

Fig. 1

Block diagram of the analytic process

First, stego images were created using type 1 of the PVD interval classification table of PVD steganography [3] (i.e., Table 1) with an embedding ratio of 100%. The test images were a set of the cover and stego images. The histogram of PVD was executed through numerous experiments. Figures 2 and 3 show the histogram of PVD before and after embedding, respectively. The high correlation between the original adjacent pixels makes the frequency of PVD in the smooth area greater than that in the edge area. Therefore, the PDH of the original image follows a Laplacian distribution [47], as shown in Fig. 2.

Fig. 2

Histogram of the pixel differences of a cover image

Fig. 3

PDH using PVD steganography with an embedding ratio of 100% (type 1 of the PVD interval)

When the histogram of PVD in the cover image follows a Laplacian distribution, the midpoints of the top edges of the rectangles in the histogram are connected by a smooth curve, which is similar to a bell curve. $h(1)$ and $h(2)$ are similar to $h( - 1)$ and $h( - 2)$, respectively, and so on, for other integers. Furthermore, the process of embedding messages changes the correlation between adjacent pixels, and the PDH of the stego image exhibits a step-like shape and left–right asymmetry, as shown in Fig. 3, where $h^{\prime}(1)$ and $h^{\prime}(2)$ are greater than $h^{\prime}( - 1)$ and $h^{\prime}( - 2)$, respectively, and so on, for other integers. When the test image is a stego image with an embedding ratio of 10%, the features of the step-like shape and left–right asymmetry are not evident on the PDH, as shown in Fig. 4.

Fig. 4

PDH using PVD steganography with an embedding ratio of 10% (type 1 of the PVD interval)

Figures 5 and 6 show the PDH of a stego image using type 2 of the PVD interval classification table of PVD steganography (i.e., Table 2) with embedding ratios of 100% and 10%, respectively. If a stego image has an embedding ratio of 100%, then the histogram of PVD exhibits a step-like shape and slightly left–right asymmetry, as shown in Fig. 5. If a stego image has an embedding ratio of 10%, then the PVD histogram has an unclear step-like and left–right asymmetry, as shown in Fig. 6.

Fig. 5

PDH using PVD steganography with an embedding ratio of 100% (type 2 of the PVD interval)

Fig. 6

PDH using PVD steganography with an embedding ratio of 10% (type 2 of the PVD interval)

3.2 Steganalysis of the PVD technique

When an embedding ratio is low, the feature on the PDH method is not evident. Therefore, using a feature of the difference between the cover and stego images, we propose a method based on the statistical feature. The difference value between pixel pairs and the frequency of PVD are denoted as $x$ and $h(x)$, respectively. If a suspicious image is a cover image, then the probability of $h(x)$ and $h( - x)$ will be approximately similar based on the previous analysis mechanism.

In real scenarios, a suspicious image cannot easily be confirmed as a cover image. Therefore, we can compare the difference between the theoretically expected frequency and observed frequency. When the secret messages are embedded into an image, the LSB values of a pixel are only changed, and the sum of the frequencies of $h(x)$ and $h( - x)$ is not changed. Therefore, the theoretically expected frequency can be obtained from any randomly obtained suspicious image, and the original image is not required.

We assume that the suspicious image is a cover image. In addition, we use significant features and a small number of test pairs as the detection range to effort the efficiency of detection. Let $X$ be the set of test pairs:

$$X_{i} = \{ [h( - x_{i} ),h(x_{i} )]\} ,$$

(10)

where i = 1, 2, …, 7.

The proposed method focuses on the similarity between the theoretically expected frequency and observed frequency, where the theoretically expected frequency is the average value of the two frequencies in any differences of the pixel pairs. We detect the degree of variability of test pairs as follows:

$$F = \frac{1}{n} \sum\limits_{i = 1}^{7} {\frac{{(X_{i} - E(X_{i} ))^{2} }}{{E(X_{i} )}}} ,$$

(11)

where n is the number of test pairs.

If the suspicious image is a cover image, then the frequency of the theoretically expected is similar to the frequency of observations, and the F value will be very small. On the contrary, the F value of a stego image is a very large value. We can obtain an appropriate threshold value through many experiments to distinguish between cover and stego images. If the suspicious image is a cover image, then the F value is less than the threshold value; otherwise, the suspicious image is a stego image (Fig. 7).

Fig. 7

Flowchart of the proposed technique

4 Experimental results and discussion

In this section, we discuss the extensive experiments conducted to validate the proposed method. The experimental environment was implemented using MATLAB R2018a on an Intel Core i5-8250U with 8 GB of RAM. Secret bitstreams were simulated with the MATLAB random number generator. We considered the detection of steganalysis as the binary classification problem with which to measure the effectiveness of the proposed method. The prediction of whether the suspicious image is a stego image or cover image is divided into four scenarios:

• (1) True positive (TP): a stego image is correctly classified as a stego image.

• (2) False negative (FN): a stego image is incorrectly classified as a cover image.

• (3) True negative (TN): a cover image is correctly classified as a cover image.

• (4) False positive (FP): a cover image is incorrectly classified as a stego image.

In general, the two criteria for validating steganalysis techniques are accuracy and precision. The proposed method was evaluated based on these criteria to verify the detection performance. The accuracy metric represents the proportion of correctly predicted classes. The precision metric represents the proportion of positive predictions that are correct. The accuracy and precision should be as high as possible, which are calculated using Eqs. (12) and (13), respectively.

$${\text{Accuracy = }}\frac{{\text{TP + TN}}}{{\text{TP + FP + FN + TN}}}$$

(12)

$${\text{Precision = }}\frac{{{\text{TP}}}}{{\text{TP + FP}}}$$

(13)

4.1 Effectiveness of the proposed method for various embedding ratios

The experiment process was divided into two cases on the basis of the types of PVD interval classification table from the original PVD steganography [3] (i.e., Tables 1 and 2). First, we evaluated our proposed method in type 1 of the PVD interval classification table (i.e., Table 1). The cover images are grayscale images, which were taken from the BOSS [46] database. The test was randomly performed on 1000 images selected from 10,000 images that were 512 × 512 pixels in size.

In the first experiment, we evaluated our proposed method for low embedding ratios ranging from 10 to 50%. In addition, the method was evaluated at an embedding ratio of 100%. We further discussed the results obtained from our proposed technique with embedding ratios of 100% and 10%. A comparison of the distribution of the cover images with that of stego images for embedding ratios of 100% and 10% (Figs. 8 and 9, respectively) indicates that the cover and stego images were clearly distinguished. When the suggested images are cover images, the $F$ value is very low. A suitable threshold (1.4) of the F value was obtained through the experiments that were distinguished effectively between the cover and stego images.

Fig. 8

Distribution of the cover and stego images at an embedding ratio of 100% (type 1 of the PVD interval)

Fig. 9

Distribution of the cover and stego images at an embedding ratio of 10% (type 1 of the PVD interval)

Table 3 indicates that the accuracy of the proposed method is high, with more than 90% of the samples correctly identified, even at low embedding ratios.

Table 3 Results of the proposed technique (type 1 of the PVD interval)

In the second experiment, we used the same method in type 2 of the PVD interval classification table (i.e., Table 2) to evaluate our proposed method. A comparison of the distribution of the cover images with that of stego images for embedding ratios of 100% and 10% (Figs. 10 and 11, respectively) indicates that the cover and stego images were also distinguished clearly. For a better explanation of the threshold, we set the y-axis of Fig. 11 limits to range from zero to three, as shown in Fig. 12, where the appropriate threshold value is obtained through many experiments to distinguish between cover and stego images.

Fig. 10

Distribution of the cover and stego images with an embedding ratio of 100% (type 2 of the PVD interval)

Fig. 11

Distribution of the cover and stego images with an embedding ratio of 10% (type 2 of the PVD interval)

Fig. 12

The threshold of the F value with an embedding ratio of 10% (type 2 of the PVD interval)

If the suspicious image is a cover image, then the $F$ value is less than the threshold; otherwise, the suspicious image is a stego image. Overall, the proposed threshold value is applicable to various PVD interval types and embedding ratios.

Table 4 indicates that the accuracy of the proposed method is also high, with more than 90% of the samples correctly identified, even at low embedding ratios.

Table 4 Results of the proposed technique (type 2 of the PVD interval)

4.2 Comparative analysis with state-of-the-art techniques

To prove the superiority of the proposed steganalysis technique, we compared the performance of our proposed method with that of the state-of-the-art method [40] using various types of images and embedding ratios. The cover images, which are grayscale images, were taken from the BOSS [46] and Break Our Watermarking System 2 (BOWS2) [48] image databases, respectively. Tests were randomly performed on 1,000 images selected from the 10,000 images that were 512 × 512 pixels in size. Stego images were generated from the common type 1 of PVD interval classification table from PVD steganography [3] (i.e., Table 1).

In Zhang et al. [40], the best option for the WS estimator for the PVD steganalysis technique was proposed. We conducted the parameters of a local linear predictor with the usualness and best-estimated performance. The estimator value of a cover image should be zero. Therefore, we assumed the threshold to be zero.

Using 1,000 images, we compared the detection performance of the proposed method with that of the state-of-the-art technology [40] in terms of accuracy and precision. A comparison of the results with respect to accuracy and precision is presented in Tables 5, 6, 7 and 8. Tables 5, 6, 7 and 8 indicate that the accuracy and precision of the proposed method are high, with more than 90% of the samples correctly identified, even at low embedding ratios.

Table 5 Comparison of the accuracy of methods for the BOSS image database

Table 6 Comparison of the precision of methods for the BOSS image database

Table 7 Comparison of the accuracy of methods for the BOWS2 image database

Table 8 Comparison of the precision of methods for the BOWS2 database image

To objectively demonstrate that the accuracy of our method is high even when different images databases are used and to avoid inconsistency in results with different image sets, the cover images were taken from the Uncompressed Color Image Database (UCID) image database [49]. The images in this database are color images. The color images were converted into grayscale images, and the same method was used to embed 1,000 images that were 512 × 512 pixels or 512 × 384 pixels in sizes for comparison. The results show that the proposed method in the various types of images detects suspicious images accurately and precisely (Tables 9, 10).

Table 9 Comparison of the accuracy for the UCID database images

Table 10 Comparison of the precision for the UCID database images

5 Discussion

The experimental results demonstrate that the proposed technique can clearly distinguish cover and stego images using a scatter diagram. In addition, the proposed technique is accurate and precise at low embedding ratios for various image sets and types of PVD interval classification tables. Although the WS steganalysis [40] is novel, the large number of false positive it produces renders it an unreliable steganalysis method. The WS steganalysis method [40] can estimate the embedding ratios in bits per pixel using the sum value. However, the partial parameters of the embedding process must be obtained, and the appropriate policy must be selected. By contrast, the proposed technique does not require the cover image to be obtained in advance.

Overall, the proposed method in the various types of images detects suspicious images accurately and precisely, even at low embedding ratios. In addition, our proposed method does not need to obtain the original image and embedding parameters, compared with the state-of-the-art method [40]. Therefore, our proposed method is a simpler and more effective technique compared with other steganalysis techniques.

6 Conclusions

In this study, we proposed a technique that addresses certain potential problems of the existing PVD steganography and steganalysis. We are motivated by the fact that relevant studies have focused on evading detection using RS analysis and PDH attack. However, RS analysis is aimed at the feature of the LSB substitution method, which is relatively less significant for PVD steganography. When the embedding ratio is low, the feature of the PDH is not clear. In addition, the state-of-the-art method [40] needs to obtain the original embedding parameters, which does not comply with a real detection situation. Therefore, we propose a simple and effective method based on statistical features for PVD steganalysis.

We conducted experiments with 1,000 images and found that our proposed method generally performed better than the other state-of-the-art methods across different image sets and embedding ratios. In terms of accuracy and precision, our method performs much better at low embedding ratios in the experiments. Therefore, our technique can serve as an effective tool for the steganalysis of PVD steganography and is a suitable alternative to the commonly used RS, PDH analysis, and WS steganography techniques. In particular, our method is expected to serve as a valuable addition to the toolkit of steganalysis techniques and digital forensics for the evaluation of PVD-based steganography in general and original PVD steganography techniques.