Completeness
		¨ Provide An Analysis That Demonstrates That The Full Set Of Tests Exercises The Full Range Of TSF Interfaces ¨ Rigorous Demonstration Requires That It Be Shown That The Testing Of Each Interface Be Complete (i.e., exhaustive) – Potentially a flawed requirement, since it is generally acknowledged that complex system interfaces cannot be exhaustively tested
	600.436 High- Assurance Systems
				Fall 01/Security Function Testing				8