600.436 High-Assurance
Systems
Fall 01/System Security Realization
18
Definition
¨“A … description of the internal
workings of the TSF in terms of modules and their interrelationships
and dependencies.”
¨The role of the low level design in Common Criteria is to
increase confidence the TSF subsystems are correctly and effectively refined.