Protection domain is a set of access rights defined as a set of objects and operations permissible on them
Figure 1: Access Domains
User process executing in domain D has access rights specified by D
Figure 3: Access Matrix
Specifies authorisation policy (Rows = domain, columns = objects)
