600.436 High-Assurance
Systems
Fall 01/System Security Realization
13
Security enforcing HLD
¨Same
as Descriptive HLD plus
–describe
the purpose and method of use of all interfaces to the subsystems of the TSF, providing
details of effects, exceptions and error messages, as appropriate.
–describe the separation of the TOE into TSP-enforcing and
other subsystems.