 This must hold for every possible value on the input.This implies that even if "higher" variables in the program has different values from one execution to another, this should not be visible on the "lower" variables.An attacker could try to execute a program which does not satisfy noninterference repeatedly and systematically to try to map its behavior.