Question

If we talk about Return Oriented Programming, which of the following statement is true ?
1.It is a computer security exploit technique that allows an attacker to execute code in the presence of security defences such as DEP and code signing
2.These types of attacks arise when an adversary manipulates the call stack by taking advantage of a bug in the program, often a buffer overflow.
3.Return-oriented programming is an advanced version of a stack smashing attack.
4.All of the above

Answer 1

Answer: Ans is option(4)

Explanation: because Return Oriented Programming is a  computer security exploit technique that allows an attacker to execute code in the presence of security defences such as DEP and code signing .These types of attacks arise when an adversary manipulates the call stack by taking advantage of a bug in the program, often a buffer overflow. Return-oriented programming is an advanced version of a stack smashing attack.