1. A method of providing access control for an application comprising: monitoring the application; generating for the application, based at least in part on behavior of the application as observed through said monitoring of the application, and based at least in part on an input a user is prompted to provide, an application profile that defines one or more access controls associated with the application; and storing the access controls in a policy module configured to enforce the access controls specified in the application profile against the application.