Each process has its own virtual address space. Processes invisible to each other. Process cannot access another processes memory. MMU checks protection bits on memory access (during address mapping). Pieces can be protected from being written to or being executed or even being read. System can distinguish different protection levels. Write protection can be used to implement copy on write.