Great question — answering as the UphillTech team:
Not having any partitions that windows 8 can access mapped to drive letters will stop 99% of all malware, but you will need to do it in the other direction too, so windows 8 can't see win7 partitions too. Otherwise a file that both systems can see will get infected on the 7 side, then you reboot, open the file on 8, and get infected over there too. You may be better off just giving 8 the entire drive and running 7 inside a VM, that will help keep the separation of the two and you won't get any accidental spill over contamination.
Full answer by Scott Chamberlain: https://superuser.stackexchange.com/a/549802 (CC BY-SA 3.0).
Need it done for your business? UphillTech.