thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

Data Execution Prevention (DEP)

A mitigation that marks memory regions such as the stack and heap as non-executable, using the CPU's NX/XD bit.

Definition

DEP prevents injected shellcode in data regions from running, which pushed attackers toward code-reuse techniques such as return-oriented programming. Also called NX (no-execute) or W^X (write xor execute).

Example

Windows enables DEP for 64-bit processes by default.

Exam tip

DEP stops executing injected code but not ROP; ASLR helps against ROP.

Related terms