An attacker can and will modify an existing attack so that its new signature will differ from the original to such a point that the IDS will no longer identify it as malicious activity.

• 攻击者会修改已经存在的攻击使用新的攻击与原来的攻击有不同的特征，这样便使得IDS不再将其分辩为攻击行为。