Address spoofing/proxying: attackers can increase the difficulty of the ability of Security Administrators to determine the source of the attack by using poorly secured or incorrectly configured proxy servers to bounce an attack.
Pattern change evasion: IDSs generally rely on 'pattern matching' to detect an attack.