Outline for May 24, 2013

Reading: §19
Due: Homework #4, due May 24, 2013

1. Policy and requirements
   1. Security specifications
   2. Problems with precision
   3. Example: System X and Bell-LaPadula
   4. Justifying requirements
2. Techniques to support design assurance
   1. Subsystem, subcomponent, module
3. Design documents
   1. Security functions summary specification
   2. External functional specification
   3. Internal design description
4. Justifying design meets requirements