SecAwarenessTruss: A Federated Cyber Range Solution for Critical Infrastructures
Michail Smyrlis, Evangelos Floros, Nikolaos Nikoloudakis, Eliana Stavrou, Dimitris Merkouris, Athanasios Arvanitis, George Spanoudakis, Stelios E. Papadakis, George Potamos, Stavros Stavrou · 2025
The increasing frequency, sophistication, and impact of cyberattacks have exposed critical gaps in the preparedness of organizations to detect, respond to, and recover from evolving threats. Traditional training approaches often lack realism, adaptability, and alignment with organizational risks, making them insufficient for today’s dynamic threat landscape. There is a pressing need for cybersecurity training solutions that are not only technically robust but also context-aware and risk-driven. This paper presents an integrated cybersecurity training and assurance framework that combines advanced cyber range capabilities with dynamic risk assessment tools to deliver tailored, organization-specific Training Programmes, that will be realized in four, critical infrastructure pilots, namely healthcare, energy, telecommunication, and maritime, in Greece, and Cyprus. Central to the proposed solution is a federated environment utilizing two Cyber Range platforms, enabling both domain-specific and cross-domain scenarios of varying complexity and difficulty, alongside a risk assessment tool, enabling the assurance to training approach offering a scalable, interoperable, and operationally relevant cybersecurity training ecosystem.