600.436 High-Assurance
Systems
Fall 01/Protection Profiles
22
Informal TSP Model
¨“The TSP model shall be
informal”
¨“…describe rules and characteristics
of all policies
of TSP that can be modeled”
¨“…include a rationale that
demonstrates that it (the TSP Model) is consistent and complete with
respect to all TSP policies that can be modeled”
¨“The demonstration of correspondence
… shall
show that all security functions in FSP are consistent and complete with respect
to the
TSP model