Role of Security Function Testing
		¨ Show That TOE Functional Requirements Are Satisfied ¨ Emphasis Is On Confirming That TOE Operates According To Its Specification – Positive testing to show presence of required behaviors – Negative testing to show absence of prohibited behaviors ¨ Can be Applied Recursively to TOE Internal Structure
	600.436 High- Assurance Systems
				Fall 01/Security Function Testing			2