Generating zero-trust policy for application access based on sequence-based application segmentation

A non-transitory computer-readable storage medium having computer readable code stored thereon for programming at least one processor to perform steps of:

• obtaining log data for a plurality of users of an enterprise where the log data relates to usage of a plurality of applications by the plurality of users and user metadata;
• analyzing the log data to determine one or more sequential patterns of ordered transitions of application access;
• determining i) app-segments that are groupings of application of the plurality of applications and ii) user-groups that are groupings of users of the plurality of users, based on the log data and the one or more sequential patterns of application access, wherein the sequential patterns are used to compute transition probabilities or transition-likelihood metrics between applications to infer application similarity and correlated user roles;
• and
• providing access policy of the plurality of applications based on the user-groups and the app-segments.