Unfortunately, this is not the first time this topic has come up. The concept of polymorphism has been around since the early days of antivirus software, and I've only recently started hearing it in the context of an IDS. Luckily, the use of polymorphic code hasn't been very widespread. Perhaps there's still tme to figure out the best way to deal with it before it's too late.