Enhancing Cyber Resilience Through Intelligent Cyber Range Architectures for Professional Training

This paper presents the TYPHON intelligent cyber range platform, a cloud-native training infrastructure developed under the bilateral Romanian-Moldovan project PN-IV-PCB-RO-MD-2024-0558. The platform is built on a Clean Architecture stack encompassing Blazor WebAssembly, CQRS-based backend, Proxmox/Kubernetes virtualization, Apache Guacamole browser-based remote access, and AI-driven scenario management. It addresses the demands of cybersecurity training in environments characterized by the VUCA and BANI paradigms. The architecture supports 500+ concurrent users across 12 registered organizations, deploys training environments within five minutes, and enforces comprehensive security through TLS 1.3 and AES-256 encryption. Role-based access control separates trainee, instructor, administrator, and red/blue team roles, while an intelligent evaluation engine provides real-time skill gap analysis and personalized learning paths. Scenario categories span network intrusion, ransomware response, APT campaigns, red team/blue team exercises, and CTF competitions, mapped to MITRE ATT&CK TTPs. The paper details the platform architecture, non-functional requirements, training methodology, and preliminary outcomes, contributing to the advancement of cyber resilience education at regional and institutional levels.