Semiformal TSP Model
¨ “The TSP model shall be semiformal”
¨ “Where the functional specification
is at least semiformal, the
demonstration of correspondence
between the TSP Model and the
functional specification shall be
semiformal”
600.436 High-
Assurance Systems
Fall 01/Protection Profiles
23