# Security

- [Information security concepts](/ke/design/security/information-security-concepts.md)
- [Access Control Lists (ACLs)](/ke/design/security/access-control-lists-acls.md)
- [Access Control Models](/ke/design/security/access-control-models.md)
- [.NET Cryptography Model](/ke/design/security/.net-cryptography-model.md)
- [ASP.NET Identity](/ke/design/security/asp.net-identity.md)
- [OWASP Top 10](/ke/design/security/owasp-top-10.md)
- [Cross-Site Request Forgery (XSRF)](/ke/design/security/cross-site-request-forgery-xsrf.md)
- [Protecting against cross-site scripting attacks (XSS)](/ke/design/security/protecting-against-cross-site-scripting-attacks-xss.md)
- [Protecting against buffer overrun attacks](/ke/design/security/protecting-against-buffer-overrun-attacks.md)
- [Protecting against SQL-injection attacks](/ke/design/security/protecting-against-sql-injection-attacks.md)
- [CSRF/XSRF protection](/ke/design/security/csrf-xsrf-protection.md)
