Noninterference Policy For Trusted Virtual Machine Monitors

In this paper, a noninterference policy based on determinative state machine formal model is proposed to enhance the isolation capability of the virtual machine monitor system. It formally specifies the strong isolation property that trusted virtual machine monitors require and concludes some practical design restrictions to them. Compared with related works it shows more precise mapping to real systems and produces more practical specifications for the design