The invention discloses a situation-based ROP attack detection system and method. The system comprises a user interaction module, an injector module, a monitoring module, a situation collection module, an ROP attack detection module and a recording module. The method comprises three parts of injecting a system key process; collecting detected application situation information and detecting an ROP attack. According to the situation-based ROP attack detection system and method, the ROP attack in an Android system can be effectively detected, so that an attacker is prevented from using an ROP technology to execute malicious codes or bypass a security mechanism, a user is prevented from suffering from the harm of the ROP attack, and the system security is improved.