Managing the risk of covert information flows in virtual machine systemsTrent JaegerReiner Saileret al.2007SACMAT 2007