Method and system for protecting cloud-based applications executed in a cloud computing platform

A system for reconstructing application-layer traffic flowing between a plurality client devices and a cloud computing platform, comprising:

• a processor;
• and
• a memory, the memory containing instructions that, when executed by the processor, configure the system to:
• intercept traffic flows from a plurality of client devices to the cloud computing platform, wherein each of the plurality of client devices is associated with a user attempting to access a cloud-based application;
• extract at least one parameter from the intercepted traffic related to at least each client device and a respective user attempting to access the cloud-based application;
• determine based on, the at least one parameter and at least a set of parameters combining cloud-based application risk factors for a provider of the cloud computing platform, a risk indicator for the user attempting to access the cloud-based application;
• and
• perform an action to mitigate a potential risk to the cloud computing platform based on the determined risk indicator.