Re: I-0413: Assurance Of RVM Is By Testing And Design Analysis

[James Arnold <arnoldj1@saic.com>]

I-0413: Assurance Of RVM Is By Testing And Design Analysis

I disagree with the issue statement.  I think that most of the security
functional requirements are not "completely testable" through the TSF
interface.  Such testing must be supported and bounded by design
analysis.  In this respect I believe that RVM is not outstanding.
Regardless, I also believe that the CC (in the form of EAL assurance
security requirement packages) is pretty clear that both design analysis
and testing is required for all security functions.  Hence, I do not
believe that this interpretation has value.