1. A processor comprising: a Return Oriented Programming (ROP) detection unit to: calculate a ROP metric based on one or more control transfer events, and if the ROP metric exceeds a threshold, provide an indication of a possible ROP attack.