600.436 High-Assurance
Systems
Fall 01/Protection Profiles
21
Correspondence
¨Link
TSP Model to Functional Specification
¨Show
that, with respect to the TSP Model, the external interfaces in the Functional
Specification
are all
–Consistent
– i.e., implement the modeled semantics of security
–Complete
– i.e., all elements of the TSP model are realized in at least one external
interface