Generating zero-trust policy for application access utilizing knowledge graph based application segmentation

A non-transitory computer-readable storage medium having computer readable code stored thereon for programming at least one processor to perform steps of:

• obtaining log data for a plurality of users of an enterprise, wherein the log data relates to usage of a plurality of applications by the plurality of users;
• analyzing the log data to determine one or more relations between the plurality of users and the plurality of applications;
• determining one or more app-segments that are groupings of application of the plurality of applications based on the log data and the one or more relations between the plurality of users and the plurality of applications;
• and
• providing access policy of the plurality of applications based on the one or more app-segments.