A JPEG image steganalysis scheme based on joint discrete cosine transform (DCT) domain features is proposed. Intrinsic characteristics of DCT coefficients, such as histogram, intrablock correlation, and interblock correlation, are exploited to construct three feature sets. Support vector machine is utilized to learn and discriminate the difference of features between cover and stego images. First, the three feature sets are investigated separately to reveal their individual capability of attacking steganographic methods. Second, the feature sets are combined to form a joint feature set with be...