方法对比

	面向返回编程	深度包检测
领域	密码学	密码学
方法族	Machine learning	Machine learning
起源年份	2007	1990s
提出者	Hovav Shacham	Unknown
类型	code reuse attack methodology	packet inspection technique
开创性文献	Shacham, H. (2007). The geometry of innocent flesh on the bone: Return-into-libc without function calls (on the x86). In Proceedings of the 14th ACM Conference on Computer and Communications Security (CCS 2007), pp. 552-561.	Leconte, M., & Thomas, A. (2009). Deep Packet Inspection (DPI) technologies. In Proceedings of the Global Telecommunications Conference (GLOBECOM), 2009, pp. 1-6.
别名	ROP, code reuse attack, Turing-complete gadget	DPI, complete packet inspection, packet filtering
相关	3	3
摘要	Return-Oriented Programming (ROP) is an exploit technique that chains together short sequences of instructions (gadgets) from existing executable code to perform arbitrary computation, bypassing security defenses like code injection prevention. Introduced by Hovav Shacham in 2007, ROP exploits code reuse to execute malicious logic even when data execution prevention (DEP) and code signing prevent direct code injection. ROP is considered one of the most powerful exploit techniques against modern defense mechanisms and has been demonstrated to be Turing-complete.	Deep Packet Inspection (DPI) is a network traffic analysis technique that examines the complete packet payload beyond header information to identify, classify, and potentially control data traffic. Developed in the 1990s for network monitoring and management, DPI analyzes packet contents to detect protocols, applications, and patterns, enabling security monitoring, quality of service management, and content filtering. DPI is widely used by Internet service providers, enterprises, and security organizations to monitor network traffic and enforce policies.