600.436 High-
Assurance Systems
Fall 01/Protection Profiles
15
Formal Functional Specification
¨
“describe the TSF and its external interfaces
using a
formal
style, supported by informal,
explanatory text where appropriate”