600.436 High-Assurance Systems
Fall 01/Protection Profiles
15
Formal Functional Specification
¨“describe the TSF and its external interfaces using a formal style, supported by informal, explanatory text where appropriate”