600.436 High-Assurance
Systems
Fall 01/System Security Realization
26
Semiformal Low Level Design
¨The presentation of the low-level
design shall be semiformal.
¨The
low-level design shall describe the purpose and method of use of all
interfaces to the modules of the TSF, providing complete details of all effects, exceptions and error
messages.