600.436 High-Assurance
Systems
Fall
01/Protection Profiles
15
e.g. - Rationale Sample
¨ADO_DEL.2
- Detection of Modification
–Added threat that the TOE may be modified before
delivery
–The security objective is to protect the integrity of the TOE
–The non-IT environment provides procedures and measures to
detect modification, as defined in the environmental policy