Network segmentation

1. A method, comprising:

analyzing a network for a set of network entities;

determining network factors for a first network entity of the set of network entities;

determining, for the first network entity, a first segmentation score that indicates risk factors determined based on multiple network factors;

identifying, based on the first segmentation score, that the first network entity is a segmentation candidate; and

segmenting the segmentation candidate by transferring the segmentation candidate into an isolated part of the network.

2. The method of claim 1 , further comprising:

searching the network to determine the set of network entities, the set of network entities belonging to the network; and

storing the set of network entities.

3. The method of claim 1 , further comprising:

evaluating additional network factors for the set of network entities; and

determining one or more additional segmentation candidates based on the evaluation of the additional network factors.

4. The method of claim 3 , further comprising:

determining a risk ranking for each network factor for each network entity; and

aggregating each risk ranking into a respective segmentation score for each network entity.

5. The method of claim 4 , further comprising:

weighting each risk ranking according to weighting values to determine each respective segmentation score.

6. The method of claim 5 , wherein each respective segmentation score measures suitability of segmentation.

7. The method of claim 5 , further comprising:

comparing each respective segmentation score to a threshold score representing a minimum segmentation candidacy; and

segmenting the segmentation candidate when the first segmentation score satisfies the threshold score.

8. A system, comprising:

a processor coupled to a memory that stores instructions that, when executed by the processor, cause the processor to:

analyze a network for a set of network entities;

determine network factors for a first network entity of the set of network entities;

determine, for the first network entity, a first segmentation score that indicates risk factors determined based on multiple network factors;

identify, based on the first segmentation score, that the first network entity is a segmentation candidate; and

segment the segmentation candidate by transferring the segmentation candidate into an isolated part of the network.

9. The system of claim 8 , wherein the instructions further cause the processor to:

search the network to determine the set of network entities, the set of network entities belonging to the network; and

store the set of network entities.

10. The system of claim 8 , wherein the instructions further cause the processor to:

evaluate additional network factors for the set of network entities; and

determine one or more additional segmentation candidates based on the evaluation of the additional network factors.

11. The system of claim 10 , wherein the instructions further cause the processor to:

determine a risk ranking for each network factor for each network entity; and

aggregate each risk ranking into a respective segmentation score for each network entity.

12. The system of claim 11 , wherein the instructions further cause the processor to weight each risk ranking according to weighting values to determine each respective segmentation score.

13. The system of claim 12 , wherein each respective segmentation score measures suitability of segmentation.

14. The system of claim 12 , wherein the instructions further cause the processor to:

compare each respective segmentation score to a threshold score representing a minimum segmentation candidacy; and

segment the segmentation candidate when the first segmentation score satisfies the threshold score.

15. A non-transitory computer readable medium having instructions which, when executed by one or more processors, cause the one or more processors to:

analyze a network for a set of network entities;

determine network factors for a first network entity of the set of network entities;

determine, for the first network entity, a first segmentation score that indicates risk factors determined based on multiple network factors;

identify, based on the first segmentation score, that the first network entity is a segmentation candidate; and

segment the segmentation candidate by transferring the segmentation candidate into an isolated part of the network.

16. The non-transitory computer readable medium of claim 15 , further comprising program code configured to cause the one or more processors to:

search the network to determine the set of network entities, the set of network entities belonging to the network; and

store the set of network entities.

17. The non-transitory computer readable medium of claim 15 , further comprising program code configured to cause the one or more processors to:

evaluate additional network factors for the set of network entities; and

determine one or more additional segmentation candidates based on the evaluation of the additional network factors.

18. The non-transitory computer readable medium of claim 17 , further comprising program code configured to cause the one or more processors to:

determine a risk ranking for each network factor for each network entity; and

aggregate each risk ranking into a respective segmentation score for each network entity.

19. The non-transitory computer readable medium of claim 18 , further comprising program code configured to cause the one or more processors to weight each risk ranking according to weighting values to determine each respective segmentation score.

20. The non-transitory computer readable medium of claim 18 , further comprising program code configured to cause the one or more processors to:

compare each respective segmentation score to a threshold score representing a minimum segmentation candidacy; and

segment the segmentation candidate when the first segmentation score satisfies the threshold score.