Run several operating systems safely on shared hardware using privileged execution, address translation, and device isolation. Compare full virtualization, paravirtualization, nested paging, and IOMMUs.