Semi-automatic communication network microsegmentation

A non-transitory computer-readable medium storing computer program instructions that are executed by at least one computer processor to perform steps of:

• collecting network information associated with a plurality of hosts;
• measuring a similarity for each of the plurality of hosts;
• identifying, from the plurality of hosts, a group of hosts which are sufficiently similar to each other as measured by one or more criteria related to any of how the group of hosts communicate with other hosts and software installed thereon;
• generating and storing data indicating that the identified group of hosts forms a particular microsegment:
• and
• providing output representing each defined microsegment.

A system comprising at least one computer processor executing computer program instructions stored on at least one non-transitory computer-readable medium to perform steps of:

• collecting network information associated with a plurality of hosts;
• measuring a similarity for each of the plurality of hosts;
• identifying, from the plurality of hosts, a group of hosts which are sufficiently similar to each other as measured by one or more criteria related to any of how the group of hosts communicate with other hosts and software installed thereon;
• generating and storing data indicating that the identified group of hosts forms a particular microsegment:
• and
• providing output representing each defined microsegment.