600.436 High-Assurance
Systems
Fall 01/Protection Profiles
18
Aspects of the Family
¨Rules and Characteristics of All
Policies That Can be Modeled
¨TOE
Security Policy (TSP) Model Rationale
¨Demonstrate
Correspondence Between the Model and the
TSF and Interfaces Described In the Functional Specification