Dynamic hyper context-driven microsegmentation

1. A method comprising:

detecting a computing device on a network;

assigning a network hyper context to the computing device based on network properties and computing device properties associated with the computing device;

accessing a policy defining a segment identifier identifying a network segment and corresponding to the network hyper context;

assigning the segment identifier to the computing device; and

segmenting the computing device onto the network segment responsive to detecting the computing device.

2. The method of claim 1 , further comprising:

detecting a change in connectivity type utilized by the computing device; and

re-segmenting the computing device onto the segment subsequent to detecting the change in connectivity type.

3. The method of claim 2 , wherein detecting a change in connectivity type utilized by the computing device comprises detecting a change from wireless connectivity to wired connectivity.

4. The method of claim 2 , wherein detecting a change in connectivity type utilized by the computing device comprises detecting a change from wired connectivity to wireless connectivity.

5. The method of claim 2 , wherein the re-segmenting includes de-authenticating the computing device from the network.

6. The method of claim 1 , further comprising prior to assigning a network hyper context to the computing device:

accessing a hyper context set defining a plurality of possible network hyper contexts and corresponding policies; and

locating the network hyper context from within the hyper context set based on the network properties and computing device properties, the corresponding policies of the hyper context set defining that devices assigned the network hyper context are to be segmented onto the segment.

7. The method of claim 6 , wherein the hyper context set is generated based on one or more computing device properties and network properties.

8. The method of claim 6 , wherein segmenting the computing device onto the segment comprises enforcing the corresponding policies of the hyper context on the computing device.

9. The method of claim 1 , further comprising blacklisting a computing device that is prevented from joining the network.

10. A method comprising:

detecting a computing device on a computer network;

assigning a computer network hyper context to the computing device based on network properties and computing device properties associated with the computing device;

accessing a policy defining a virtual local area network (VLAN) identifier identifying a VLAN and corresponding to the computer network hyper context;

assigning the VLAN identifier to the computing device; and

segmenting the computing device onto the VLAN responsive to detecting the computing device.

11. The method of claim 10 , further comprising:

detecting a change in connectivity type utilized by the computing device; and

re-segmenting the computing device onto the virtual local area network (VLAN) subsequent to detecting the change in connectivity type.

12. The method of claim 11 , wherein the re-segmenting includes de-authenticating the computing device from the computer network.

13. The method of claim 11 , wherein detecting a change in connectivity type utilized by the computing device comprises detecting a change from wireless connectivity to wired connectivity.

14. The method of claim 11 , wherein detecting a change in connectivity type utilized by the computing device comprises detecting a change from wired connectivity to wireless connectivity.

15. The method of claim 10 , further comprising prior to assigning a computer network hyper context to the computing device:

accessing a hyper context set defining a plurality of possible computer network hyper contexts and corresponding policies; and

locating the computer network hyper context from within the hyper context set based on the network properties and computing device properties, the corresponding policies of the hyper context set defining that devices assigned the computer network hyper context are to be segmented onto the VLAN.

16. The method of claim 15 , wherein the hyper context set is generated based on one or more computing device properties and computer network properties.

17. The method of claim 15 , wherein segmenting the computing device onto the VLAN comprises enforcing the corresponding policies of the hyper context on the computing device.

18. The method of claim 10 , further comprising blocking a computing device that is prevented from joining the network.

19. An apparatus comprising:

a network traffic controller associated with a network, the network traffic controller configured to enable an interface of a computing device the network;

a hyper context network sensor configured to observe span traffic associated with the network and detect the computing device on the network via the network traffic controller;

a hyper context cloud server configured to receive data associated with the span traffic, assign a network hyper context to the computing device based on network properties and computing device properties associated with the computing device, and access a policy defining a segment identifier identifying a network segment and corresponding to the network hyper context; and

a cloud controller configured to segment the computing device onto the network segment responsive to detecting the computing device.

20. The apparatus of claim 19 , wherein the hyper context set is generated based on one or more computing device properties and network properties.

21. The apparatus of claim 19 , wherein segmenting the computing device onto the segment comprises enforcing the corresponding policies of the hyper context on the computing device.

22. The apparatus of claim 19 , wherein the computing device connects to the network via a wireless access point or a wired network switch.