600.436 High-Assurance
Systems
Fall 01/Security Function Testing
2
Role of
Security Function Testing
¨Show
That TOE Functional Requirements Are Satisfied
¨Emphasis
Is On Confirming That TOE Operates According To Its Specification
–Positive
testing to show presence of required behaviors
–Negative
testing to show absence of prohibited behaviors
¨Can be
Applied Recursively to TOE Internal Structure