600.436 High-Assurance
Systems
Fall 01/Security Function Testing
16
Testing: Low-Level Design
¨The depth analysis shall demonstrate
that the
tests identified in the test documentation are sufficient to demonstrate that the
TSF operates
in accordance with its high-level design and low-level design.