<!-- loio27a7f6329f714253ac40682d1a7ec1b4 -->
# Security Aspects of Data, Data Flow for API Management
Here you can find information on how to secure API Management applications.
<table>
<tr>
<th valign="top">
Section
</th>
<th valign="top">
Description
</th>
</tr>
<tr>
<td valign="top">
Securing APIs
</td>
<td valign="top">
Secure your APIs by referring to the following security policies supported by API Management:
- [Basic Authentication](../50-Development/basic-authentication-693c0d1.md)
- [OAuth v2.0](../50-Development/oauth-v2-0-09b5abb.md)
- [OAuth v2.0 GET](../50-Development/oauth-v2-0-get-2e507ea.md)
- [OAuth v2.0 SET](../50-Development/oauth-v2-0-set-161c1e3.md)
- [Verify API Key](../50-Development/verify-api-key-4d15a04.md)
- [SAML Assertion Policy](../50-Development/saml-assertion-policy-3882208.md)
</td>
</tr>
<tr>
<td valign="top">
Security Best Practices
</td>
<td valign="top">
Security policies provide information on how to control access to your APIs with OAuth, API key and other threat protection features. For more information, refer to the following policies supported by API Management:
- [Access Control](../50-Development/access-control-3f72aea.md)
- [JSON Threat Protection](../50-Development/json-threat-protection-952cbd7.md)
- [XML Threat Protection](../50-Development/xml-threat-protection-3de6615.md)
- [Message Validation Policy](../50-Development/message-validation-policy-e68da2f.md)
- [Regular Expression Protection](../50-Development/regular-expression-protection-0118f91.md)
</td>
</tr>
<tr>
<td valign="top">
Traffic management
</td>
<td valign="top">
API Management supports the following traffic management policies:
- [Quota](../50-Development/quota-1f742c1.md)
- [Spike Arrest](../50-Development/spike-arrest-bf441dc.md)
- [Concurrent Rate Limit](../50-Development/concurrent-rate-limit-8f22baa.md)
</td>
</tr>
</table>