LLM-Assisted AHP for Explainable Cyber Range Evaluation
Preprint
Abstract
Cyber Ranges (CRs) have emerged as prominent platforms for cybersecurity training and education, especially for Critical Infrastructure (CI) sectors that face rising cyber threats. One way to address these threats is through hands-on exercises that bridge IT and OT domains to improve defensive readiness. However, consistently evaluating whether a CR platform is suitable and effective remains a challenge. This paper proposes an evaluation framework for CRs, emphasizing mission-critical settings by using a multi-criteria decision-making approach. We define a set of evaluation criteria that capture technical fidelity, training and assessment capabilities, scalability, usability, and other relevant factors. To weight and aggregate these criteria, we employ the Analytic Hierarchy Process (AHP), supported by a simulated panel of multidisciplinary experts implemented through a Large Language Model (LLM). This LLM-assisted expert reasoning enables consistent and reproducible pairwise comparisons across criteria without requiring direct expert convening. The framework's output equals quantitative scores that facilitate objective comparison of CR platforms and highlight areas for improvement. Overall, this work lays the foundation for a standardized and explainable evaluation methodology to guide both providers and end-users of CRs.Keywords
All Related Versions
This publication has 16 references indexed in Scilit:
- Cracks in the chain: A technical analysis of real-life supply chain security incidentsComputers & Security, 2025
- Digital Twin-Enabled Incident Detection and Response: A Systematic Review of Critical Infrastructures ApplicationsInternational Journal of Information Security, 2025
- A step-by-step definition of a reference architecture for cyber rangesJournal of Information Security and Applications, 2024
- ENIGMA: An explainable digital twin security solution for cyber–physical systemsComputers in Industry, 2023
- Industrial and Critical Infrastructure Security: Technical Analysis of Real-Life Security IncidentsIEEE Access, 2021
- Cyber ranges and security testbeds: Scenarios, functions, tools and architectureComputers & Security, 2020
- A Framework for the Evaluation of Trainee Performance in Cyber Range ExercisesMobile Networks and Applications, 2019
- ELECTRE: A comprehensive literature review on methodologies and applicationsEuropean Journal of Operational Research, 2016
- A state-of the-art survey of TOPSIS applicationsExpert Systems with Applications, 2012
- The analytic hierarchy process—what it is and how it is usedMathematical Modelling, 1987