600.436 High-Assurance
Systems
Fall 01/Security Function Testing
8
Completeness
¨Provide
An Analysis That Demonstrates That The Full Set Of Tests Exercises The Full Range Of
TSF Interfaces
¨Rigorous
Demonstration Requires That It Be Shown That The Testing Of Each Interface Be
Complete (i.e., exhaustive)
–Potentially a flawed requirement, since it is generally
acknowledged that complex system interfaces cannot be exhaustively tested