US Patent 10346190 Interprocess segmentation in virtual machine environments

Techniques for segmenting an application are described herein. Communication events for an application are received. A segmentation profile for the application, which includes a set of processes, is generated based on patterns in the communication events. The segmentation profile includes two or more disjoint sets of processes of the application. Communications between processes in the two or more disjoint sets of processes are restricted by updating a communication profile for each process in the disjoint sets of processes.