600.436 High-Assurance
Systems
Fall 01/System Security Realization
35
Modularity
¨The developer shall design and
structure the TSF in a modular fashion that avoids unnecessary interactions between the modules of the
design.
¨The developer shall provide an
architectural description.
¨The architectural description
shall identify the modules of the TSF.
¨The architectural description
shall describe the purpose, interface, parameters, and effects of each module of the TSF.
¨The architectural description
shall describe how the TSF design provides for largely independent modules that avoid unnecessary
interactions.