Aspects of the Family
¨
Pair-wise Correspondence
¨
All Relevant Security Functionality
¨
Exclusion of TSP or TSP Model
600.436 High-
Assurance Systems
Fall 01/System Security Realization
49