What is return oriented programming?

Question

What is return oriented programming?

Answer 1

It's a way to perform security exploits without code injection, see here .

Answer 2

According to Science Daily:

In 2007, [Hovav] Shacham first described return-oriented programming, which is a powerful systems security exploit that generates malicious behavior by combining short snippets of benign code already present in the system.

Hovav Shacham's paper on the topic Return-Oriented Programming: Exploits Without Code Injection.