CoreSphere interview question

Explain Salesforce security model in salesforce?