Re: Re-inventing the wheel?
It's the integration of introspection into the constant flow of I/O of the device(s). Doing it on the fly continuously can be cheaper than doing the same snapshots every two hours albeit a longer operation to execute and, further, less useful. Rollback of small snapshots is very inexpensive. I also like the whitelisting. The example given of reinstalling the OS is a valid point, if not one I'd pick.