Computer security protection via dynamic computer system certification

A computer program product for protecting computer security by dynamic computer system certification, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, wherein the computer readable storage medium is not a transitory signal per se, the program instructions readable by a device to cause the device to perform a method comprising:

• intercepting commands executed on a computer system, and directing the commands to execute in a sandbox environment of the computer system, wherein a full access to execute commands is allowed in the sandbox environment;
• based on the intercepted commands, inferring a role of a user associated with the commands by running a machine learning model with input including at least the intercepted commands, the inferring including at least determining what role the user is fulfilling on the computer system and determining whether the intercepted commands include a computer operating system command;
• determining certification required for the role;
• determining whether the user has the certification sufficient for the role;
• and
• responsive to determining that the user does not have the certification sufficient for the role, initiating a certification process, the certification process comprising determining a time for training based on the user's electronic calendar, automatically registering the user for the training on a training system, and at the time of the training, automatically causing a user device to connect to a target website associated with the training system to allow the user to begin the training,
• responsive to the user completing the training, collecting a proof of the certification and validating the proof by performing an image recognition processing of an item in the proof, and responsive to validating the proof, allowing the user access to a production environment,
• wherein the commands being executed in the sandbox environment of the computer system determines a new role that the user needs in the production environment, and based on the user's operations in the sandbox environment, the user's role is dynamically updated for operating in the production environment.

A computer security system with dynamic computer system certification, comprising:

• at least one hardware processor intercepting commands executed on a computer system, and directing the commands to execute in a sandbox environment of the computer system, wherein a full access to execute commands is allowed in the sandbox environment;
• based on the intercepted commands, the at least one hardware processor inferring a role of a user associated with the commands by running a machine learning model with input including at least the intercepted commands, the inferring including at least determining what role the user is fulfilling on the computer system and determining whether the intercepted commands include a computer operating system command;
• the at least one hardware processor determining certification required for the role;
• the at least one hardware processor determining whether the user has the certification sufficient for the role;
• and
• responsive to determining that the user does not have the certification sufficient for the role, the at least one hardware processor initiating a certification process, the certification process comprising determining a time for training based on the user's electronic calendar, automatically registering the user for the training on a training system, and at the time of the training, automatically causing a user device to connect to a target website associated with the training system to allow the user to begin the training,
• responsive to the user completing the training, the at least one hardware processor collecting a proof of the certification and validating the proof by performing an image recognition processing of an item in the proof, and responsive to validating the proof, the at least one hardware processor allowing the user access to a production environment,
• wherein the commands being executed in the sandbox environment of the computer system determines a new role that the user needs in the production environment, and based on the user's operations in the sandbox environment, the user's role is dynamically updated for operating in the production environment.