Quotas on VM resource use are regulated so that a malicious VM cannot exhaust computation and starve legitimate applications; guest operating system images saved when tasks are suspended or migrated are protected from unauthorised access, tampering and storage; and access to sensitive data held in inactive VMs is monitored.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.