Security enforcing HLD
¨ Same as Descriptive HLD plus
describe the purpose and method of use of all
interfaces to the subsystems of the TSF,
providing details of effects, exceptions and
error messages, as appropriate.
describe the separation of the TOE into TSP-
enforcing and other subsystems.
600.436 High-
Assurance Systems
Fall 01/System Security Realization
13