AI-Driven Adaptive Scenario Generation and Attack Orchestration in Hybrid Cyber Ranges
School: School of Science and Technology
Study mode(s): Full-time
Starting: 2026
Funding: UK student / EU student (non-UK) / International student (non-EU) / Fully-funded
Project overview
This project will explore how AI and Large Language Modules (LLMs) can be used to automate the generation and orchestration of cyber-attack and defence scenarios within a Hybrid Cyber Range. The research will focus on adaptive, data-driven scenarios that respond to user behaviour and system state, enabling more realistic red- and blue-team exercises and improving the effectiveness of cyber security training and experimentation.
Research Aim and Question:
- Integrates AI to enhance fidelity, adaptability and automation in cyber scenario generation and orchestration.
- What AI and LLMs techniques can generate adaptive and context-aware cyber-attack and defence scenarios for red/blue team exercises?
This project will be a lab based and there's an opportunity to collaborate with the funder.
This research will contribute original knowledge by introducing adaptive, AI and LLM-driven cyber scenario generation mechanisms that dynamically respond to user behaviour and system context, moving beyond static, pre-scripted cyber range exercises.
Supervisory team
Entry qualifications
- A bachelor (First Class or 2:1 equivalent in UK and master’s degree (or equivalent) in Computer Science, Cyber Security or related field.
- Strong software skills in an experience or exposure with ML frameworks.
- Familiarity with networking hardware, tools, technologies
- Excellent written and verbal communication skills
- Knowledge of operational technology is an advantage.
- Proven ability to publish papers in peer journals is and advantage.
How to apply
Please visit our how to apply page for a step-by-step guide.
Applications close Friday 30 January 2026 with interviews planned to take place from Monday 2 February to Friday 16 February 2026.
This project belongs to a series of similar research projects, name the project title at the start of your application statement to ensure your application is considered for the correct title.
Fees and funding
The PhD will be fully funded by the University (via an Externally funded Research Project). The funding covers monthly stipend, tuition fee, travel for conferences as well as access to state-of-the-art Cyber Range testbed lab and related research equipment.
Guidance and support
Find out about guidance and support for PhD students.
Still need help?
Contact Dr Tawfik Al-Hadhrami on:
- Email: tawfik.al-hadhrami@ntu.ac.uk