Capability Matrix. We constructed a capability matrix, using the subjects, objects, and behaviors in the Trust Domain. The capability matrix was then used to define the security policy, P. This, in turn, allowed us to construct a test case matrix, which enumerates the test cases we needed to perform.
