More sophisticated IDSs look for common shellcode signatures But even these systems can be bypassed, by using polymorphic shellcode This is a technique common among virus writers