600.436 High-Assurance
Systems
Fall 01/System Security Realization
14
Semiformal HLD
¨Same
as security enforcing, plus
–The
presentation of the high-level design shall be semiformal.
–The high-level design shall describe the purpose and
method of use of all interfaces to the subsystems of the TSF, providing complete details of all effects,
exceptions and error messages.