There are different definitions of "rogue AP". Originally, a rogue AP was defined as an unauthorized AP connected to the corporate wired network inside the firewall; these should ideally be blocked by turning off the wired port but that's probably too complex so they resort to spoofed disassociate frames. An unauthorized AP that uses the corporate SSID is also rogue because it could be used for MITMing. Recently some people have started calling "any AP that's not ours" rogue, which is taking it too far IMO and is likely to lead to some FCC smackdown.