ROP
Return-Oriented Programming
Return-Oriented Programming is an exploit technique that chains small instruction sequences (gadgets) already present in a program's memory to execute arbitrary operations. ROP bypasses DEP by reusing existing code instead of injecting new executable code.
Cómo se usa en ciberseguridad
Penetration testers use ROP chains to bypass non-executable memory protections during binary exploitation engagements. Security engineers evaluate whether deployed defenses like ASLR and Control Flow Integrity defeat ROP attacks on critical systems. Security architects specify exploit mitigation requirements based on the threat of ROP-based attacks.
Las definiciones son explicaciones originales escritas con fines de desarrollo profesional. Para definiciones técnicas autorizadas, consulta NIST, ISO o el organismo de normalización correspondiente.