Dynamic secure access policy generation based on network traffic

A system for performing dynamic network security operations, the system comprising:

• at least one processor configured to:
• monitor traffic associated with endpoints in a Secure Access Service Edge (SASE) network;
• classify endpoint behavior based on the monitored traffic;
• generate a dynamic secure access policy for each endpoint based on the classified endpoint behavior associated with each endpoint, the dynamic secure access policy governing a plurality of resources provided by a plurality of non-related entities and which each endpoint is entitled to access;
• enforce the policy based on the classified behavior to thereby prevent unapproved access to resources among the plurality of non-related entities;
• monitor changes in the endpoint behavior to determine resource usage variances;
• confirming approval to revise the dynamic secure access policy based on the determined resource usage variances;
• and
• revise the dynamic secure access policy based on the resource usage variances to reduce an attack surface.

A method for performing dynamic network security operations, the method comprising:

• monitoring traffic associated with endpoints in a Secure Access Service Edge (SASE) network;
• classifying endpoint behavior based on the monitored traffic;
• generating a dynamic secure access policy for each endpoint based on the classified endpoint behavior associated with each endpoint, the dynamic secure access policy governing a plurality of resources provided by a plurality of non-related entities and which each endpoint is entitled to access;
• enforcing the policy based on the classified behavior to thereby prevent unapproved access to resources among the plurality of non-related entities;
• monitoring changes in endpoint the behavior to determine resource usage variances;
• confirming approval to revise the dynamic secure access policy based on the determined resource usage variances;
• and
• revising the dynamic secure access policy based on the resource usage variances to reduce an attack surface.