Here is a link to a nice posting regarding security in virtualization. It links to several other reports and papers which altogether make interesting reading. http://www.itbusinessedge.com/blogs/top/?p=299
I've never been canoeing before, but I imagine there must be just a few simple heuristics you have to remember... Yes, don't fall out, and don't hit rocks.