1. A method comprising: capturing empirical information relating to the exercise of privileges by a plurality of software application instances executing on top of a plurality of instances of a platform; and dynamically generating an application profile that describes the aggregate exercise of privileges by the plurality of software application instances based on the empirical information.