600.436 High-Assurance
Systems
Fall 01/System Security Realization
5
Definition
¨The
High Level Design of a TOE provides a description of the TSF in terms of major structural units
(i.e., subsystems) and relates these units to the functions that they
provide
–Provides support for argument that TOE architecture is
appropriate for implementing the TOE security functional requirements