Most anti-ad fraud vendors can't do the IP packet analysis trick since they use ELB to help control their costs/scale.

All the other techniques require JavaScript and/or AS3 and are thus subject to modification by these kinds of sophisticated attackers. The only real way to do JavaScript in these cases is to change it often enough and run enough parallel versions that the attacker cannot keep up.