Randomizes the base addresses of the stack, heap, and libraries, making it unpredictable where code and data reside in memory. - **DEP/NX (Data Execution Prevention / No-Execute)** — Marks data regions as non-executable, preventing the direct execution of injected shellcode on the stack or heap. - *