Proceedings of International Conference on Applied Innovation in IT · 2026/04/22 · Vol. 14 · Issue 2 · pp. 383–389
Methodological Aspects of Integrating and Mathematically Modeling a Cyber Range as an Innovative IT Solution for Cybersecurity Education in Higher Education Institutions
Roman Yaroviy, Olena Skliarenko, Serhii Yahodzinskyi, Yanina Kolodinska, Oleksandr Nikolaievskyi and Hanna Tereshchuk
The increasing complexity of cyber threats necessitates scalable and practice-oriented approaches to cybersecurity education. This paper presents the design and evaluation of a virtual cyber range integrated into bachelor’s and master’s cybersecurity programs at a Ukrainian university. The proposed platform is based on a multi-layer virtualized architecture that incorporates Red, Blue, and White team environments, enabling offensive, defensive, and administrative training within a unified infrastructure. The study combines competency-based curriculum mapping with Capture the Flag (CTF) exercises and pre-/post-training assessment. Experimental results demonstrate statistically significant learning improvements, with an average Learning Gain Index (LGI) above 0.6, confirming the effectiveness of the proposed approach in developing incident response, penetration testing, and secure system configuration skills. In addition to the architectural and educational contributions, the paper introduces a stochastic discrete-time dynamic model with Markov-modulated random coefficients to evaluate cyber range effectiveness under uncertainty. The model enables quantitative assessment of long-term performance, risk levels, and resource management strategies, accounting for variability in attack intensity, system reliability, and user behavior. The proposed model is formulated independently of a specific cyber range implementation, enabling its application to a broad class of cybersecurity training and simulation platforms. The results confirm that cyber range integration strengthens competency development and aligns with international practices in cybersecurity education.
“Cyber training center,” State Center for Cyber Protection, [Online]. Available: https://scpc.gov.ua/uk/cyber-trainer/.
M. Gering, Y. Medianyk, A. Sapeha, S. Trendov, K. Karpov, H. Skaskiv, D. Kachan and E. Siemens, "Botnet Simulation and Observation Framework for AI-Driven Virtual Personas," Proceedings of International Conference on Applied Innovation in IT, vol. 13, issue 5, pp. 75–82, 2025, [Online]. Available: https://doi.org/10.25673/122810.
A. J. Ajeel and J. Kh-Madhloom, "AI-Based Intrusion Detection for Smart Grid Security," Proceedings of International Conference on Applied Innovation in IT, vol. 13, issue 5, pp. 41–47, 2025, [Online]. Available: https://doi.org/10.25673/122806.
V. Kampourakis, V. Gkioulos, and S. Katsikas, “A step-by-step definition of a reference architecture for cyber ranges,” J. Inf. Secur. Appl., vol. 88, art. no. 103917, 2025, [Online]. Available: https://doi.org/10.1016/j.jisa.2024.103917.
D. Arnold, J. Ford, and J. Saniie, “Architecture of an efficient environment management platform for experiential cybersecurity education,” Information, vol. 16, no. 7, art. no. 604, 2025, [Online]. Available: https://doi.org/10.3390/info16070604.
J. V. Bistene, A. F. P. dos Santos, C. E. das Chagas, and R. M. Salles, “Modeling network traffic generators for cyber ranges: A systematic literature review,” J. Netw. Syst. Manage., vol. 33, no. 2, 2025, [Online]. Available: https://doi.org/10.1007/s10922-025-09901-8.
L. Arsenovych, O. Nikolaievsky, O. Skliarenko, L. Lytvynenko, and I. Kydriavskyi, “Organization of training with the use of digital technologies for ensuring cybersecurity in the educational space,” WSEAS Trans. Comput. Res., vol. 12, pp. 524-536, 2024, [Online]. Available: https://doi.org/10.37394/232018.2024.12.51.
J. Christopher, “The 2024 state of ICS/OT cybersecurity: Our past and our future,” SANS Institute, Oct. 16, 2024, [Online]. Available: https://www.sans.org/blog/the-2024-state-of-ics-ot-cybersecurity-our-past-and-our-future/.
V. L. Buriachok, V. B. Tolubko, V. O. Khoroshko, and S. V. Toliupa, Information and Cybersecurity: The Socio-Technical Aspect, Kyiv: DUT, 2015, 288 p.
J. M. Castillo, M. Parenthoen, and N. Louveton, “A theoretical model for enhancing cyber crisis training in cyber ranges: Bridging cognitive load, situational awareness, and immersion,” Cogn. Technol. Work, 2025, [Online]. Available: https://doi.org/10.1007/s10111-025-00844-3.
I. Lateș, C. Boja, and A. Zamfiroiu, “Multi-technology infrastructure for advanced training and testing in cyber range systems,” Stud. Inform. Control, vol. 34, no. 3, pp. 17-28, 2025, [Online]. Available: https://doi.org/10.24846/v34i3y202502.
E. S. Alomari, M. B. M. Alkorani and K. Alieyan, "Securing the Post-Quantum Internet: A Comparative Study of Quantum-Resistant Protocols and Migration Strategies," Proceedings of International Conference on Applied Innovation in IT, vol. 13, issue 5, pp. 29–40, 2025, [Online]. Available: https://doi.org/10.25673/122804.
M. Albaladejo-González, P. Nespoli, F. Gómez Mármol, and J. A. Ruipérez-Valiente, “A multimodal and adaptive gamified system to improve cybersecurity competence training,” Cluster Computing, vol. 28, no. 9, 2025, [Online]. Available: https://doi.org/10.1007/s10586-025-05264-6.
W. Lazarov, T. Schafeitel-Tähtinen, J. Squillace, Z. Martinasek, A. Coufalikova, M. Helenius, et al., “Lessons learned from using cyber range to teach cybersecurity at different levels of education,” Technol. Knowl. Learn., 2025, [Online]. Available: https://doi.org/10.1007/s10758-025-09840-y.
V. Lakhno, H. Mohylnyi, V. Donchenko, O. Smahina, and M. Pyroh, “A model developed for teaching an adaptive system of recognising cyberattacks among non-uniform queries in information systems,” Eastern-European J. Enterp. Technol., vol. 4, no. 9(82), p. 27, 2016, [Online]. Available: https://doi.org/10.15587/1729-4061.2016.73315.
V. A. Lakhno, D. Y. Kasatkin, O. V. Skliarenko, and Y. O. Kolodinska, “Modeling and optimization of discrete evolutionary systems of information security management in a random environment,” in Machine Learning and Autonomous Systems, Singapore: Springer, 2022, pp. 9-22, [Online]. Available: https://doi.org/10.1007/978-981-16-7996-4_2.
J. Diakoumakos, E. Chaskos, N. Kolokotronis, and G. Lepouras, “Cyber-security gamification in federation of cyber ranges: Design, implementation, and evaluation,” Int. J. Inf. Secur., vol. 24, no. 1, 2025, [Online]. Available: https://doi.org/10.1007/s10207-024-00974-1.
L. O. Nweke, U. F. Okebanama, and G. U. Mba, “Enhancing entrepreneurial skills through experiential learning in IoT, AI, and cybersecurity,” Discov. Educ., vol. 4, no. 1, 2025, [Online]. Available: https://doi.org/10.1007/s44217-025-00573-9.
T. Schafeitel-Tähtinen and W. Lazarov, “Teaching and learning cybersecurity using capture the flag: Effectiveness comparison between university students in Finland and Czechia,” Comput. Appl. Eng. Educ., vol. 33, no. 5, 2025, [Online]. Available: https://doi.org/10.1002/cae.70082.