Re: SFRs - Requirement Specification or Implementation Description?



I think, there are variations. Sometimes, the TOE's startup/shutdown might
be the audit function's startup/shutdown, or enabling/disabling some
security modules could be the audit functions startup/shutdown. Or, for some
auditable events, disc failures, communication failures and those recoveries
might be the audit startup/shutdown functions.

In any above cases we would need to audit the "time", when the auditing is
enabled and/or disabled.

Regards,
Hirofumi Yokota







Date Index | Thread Index | Problems or questions? Contact list-master@nist.gov