Micro-segmentation in virtualized computing environments

A non-transitory computer-readable storage medium that includes a set of instructions which, in response to execution by a processor of a computer system, cause the processor to perform a method of micro-segmentation in a virtualized computing environment that includes multiple hosts, the method comprising:

• obtaining application implementation information associated with one or more applications implemented by multiple virtualized computing instances, wherein each of the multiple virtualized computing instances is supported by one of the multiple hosts;
• detecting micro-segments by clustering the multiple virtualized computing instances based on the application implementation information, wherein each of the detected micro-segments includes one or more of the multiple virtualized computing instances that have more similarity compared to those in a different detected micro-segment;
• and
• based on the application implementation information, determining security policies for respective detected micro-segments.

A computer system configured to micro-segmentation in a virtualized computing environment that includes multiple hosts, the computer system comprising:

• a processor;
• and
• a non-transitory computer-readable medium having stored thereon instructions that, when executed by the processor, cause the processor to:
• obtain application implementation information associated with one or more applications implemented by multiple virtualized computing instances, wherein each of the multiple virtualized computing instances is supported by one of the multiple hosts;
• detect micro-segments by clustering the multiple virtualized computing instances based on the application implementation information, wherein each of the detected micro-segments includes one or more of the multiple virtualized computing instances that have more similarity compared to those in a different detected micro-segment;
• and
• based on the application implementation information, determine security policies for respective detected micro-segments.