600.436 High-Assurance
Systems
Fall 01/System Security Realization
41
Implementation Representation
¨Must
be provided
–Possibly
for only a subset of the TSF
¨Must
“unambiguously define TSF to level of detail such that the TSF can be
generated without further design decisions”