more sophisticated idss look for common shellcode signatures

How does a polymorphic shellcode work?