Semiformal Correspondence
¨ For each adjacent pair of provided TSF
representations, where portions of both
representations are at least semiformally
specified, the demonstration of
correspondence between those portions
of the representations shall be
semiformal.
600.436 High-
Assurance Systems
Fall 01/System Security Realization
54