IBM published a fantastic introduction to the security features of the KVM hypervisor (pdf), and how it compares to its competitors. I'll be referring to this a lot.