600.436 High-Assurance
Systems
Fall 01/Security Function Testing
15
Testing: High-Level Design
¨The developer shall provide the analysis of the depth of testing.
¨The depth
analysis shall demonstrate that the
tests identified in the test documentation
are sufficient to demonstrate
that the TSF operates in accordance
with its high-level design.