Systems and methods for generating location-based application segments
Systems and methods for generating location-based application segments include obtaining transactional data for a plurality of users of an enterprise, wherein the transactional data relates to usage of a plurality of applications by the plurality of users; obtaining location data associated with the plurality of applications; and generating one or more application segments based on the transactional data and the location data. In various embodiments, the location data can be leveraged to alter various application segmentation factor thresholds for adapting the likelihood of applications to be grouped together.
1 . A non-transitory computer-readable storage medium having computer readable code stored thereon for programming at least one processor to perform steps of:
obtaining transactional data for a plurality of users of an enterprise, wherein the transactional data relates to usage of a plurality of applications by the plurality of users;
obtaining location data associated with the plurality of applications, wherein the location data includes, for each of the plurality of applications, one or more of a nearest data center location from a point of use of the application and a public Internet Protocol (IP) address location of the application;
generating one or more application segments based on the transactional data and the location data, wherein generating comprises determining one or more similarity scores between applications using one or more factors including domain name similarity, port similarity, and similarity; and
grouping applications into the one or more application segments based on the similarity scores and similarity score thresholds, and wherein at least one of the similarity score thresholds is altered based on the location data.
2 . The non-transitory computer-readable storage medium of claim 1 , wherein the steps further comprise:
providing access policy of the plurality of applications based on the one or more application segments, wherein the access policy specifies which user-groups are permitted to access which application segments on one or more ports.
3 . The non-transitory computer-readable storage medium of claim 1 , wherein the steps comprise:
receiving one or more preexisting application segments, wherein the transactional data and location data are associated with applications within the one or more preexisting application segments; and
determining a need for generating one or more additional application segments based on the transactional data and location data, including determining application usage overlaps for a plurality of locations associated with the one or more preexisting application segments.
4 . The non-transitory computer-readable storage medium of claim 3 , wherein the determining comprises determining application usage overlaps within the one or more preexisting application segments, and wherein the generating is performed based thereon.
5 . The non-transitory computer-readable storage medium of claim 1 , wherein the generating comprises determining one or more similarity scores associated with one or more factors between each of the plurality of applications and grouping one or more of the plurality of applications based thereon.
6 . The non-transitory computer-readable storage medium of claim 5 , wherein the one or more factors comprise domain name similarity, port similarity, and user similarity.
7 . The non-transitory computer-readable storage medium of claim 5 , wherein the grouping is based on a similarity score threshold associated with each of the one or more factors.
8 . The non-transitory computer-readable storage medium of claim 7 , wherein each of the thresholds associated with each of the one or more factors is altered based on the location data.
9 . The non-transitory computer-readable storage medium of claim 8 , wherein each of the thresholds are (i) increased based on two applications being within a same large location and (ii) decreased based on two applications being within a same sparse location.
10 . The non-transitory computer-readable storage medium of claim 9 , wherein the steps comprise:
determining one or more large locations and one or more sparse locations of the enterprise associated with the plurality of applications.
11 . A method comprising steps of:
obtaining transactional data for a plurality of users of an enterprise, wherein the transactional data relates to usage of a plurality of applications by the plurality of users;
obtaining location data associated with the plurality of applications, wherein the location data includes, for each of the plurality of applications, one or more of a nearest data center location from a point of use of the application and a public Internet Protocol (IP) address location of the application;
generating one or more application segments based on the transactional data and the location data, wherein generating comprises determining one or more similarity scores between applications using one or more factors including domain name similarity, port similarity, and user similarity; and
grouping applications into the one or more application segments based on the similarity scores and similarity score thresholds, and wherein at least one of the similarity score thresholds is altered based on the location data.
12 . The method of claim 11 , wherein the steps further comprise:
providing access policy of the plurality of applications based on the one or more application segments, wherein the access policy specifies which user-groups are permitted to access which application segments on one or more ports.
13 . The method of claim 11 , wherein the steps comprise:
receiving one or more preexisting application segments, wherein the transactional data and location data are associated with applications within the one or more preexisting application segments; and
determining a need for generating one or more additional application segments based on the transactional data and location data, including determining application usage overlaps for a plurality of locations associated with the one or more preexisting application segments.
14 . The method of claim 13 , wherein the determining comprises determining application usage overlaps within the one or more preexisting application segments, and wherein the generating is performed based thereon.
15 . The method of claim 11 , wherein the generating comprises determining one or more similarity scores associated with one or more factors between each of the plurality of applications and grouping one or more of the plurality of applications based thereon.
16 . The method of claim 15 , wherein the one or more factors comprise domain name similarity, port similarity, and user similarity.
17 . The method of claim 15 , wherein the grouping is based on a similarity score threshold associated with each of the one or more factors.
18 . The method of claim 17 , wherein each of the thresholds associated with each of the one or more factors is altered based on the location data.
19 . The method of claim 18 , wherein each of the thresholds are (i) increased based on two applications being within a same large location and (ii) decreased based on two applications being within a same sparse location.
20 . The method of claim 19 , wherein the steps comprise:
determining one or more large locations and one or more sparse locations of the enterprise associated with the plurality of applications.