Cyber threats have been growing tremendously in recent years. There are significant advancements in the threat space that have led towards an essential need for the strengthening of digital infrastructure security. Better security can be achieved by fine-tuning system parameters to the best and optimized security levels. For the protection of infrastructure and information systems, several guidelines have been provided by well-known organizations in the form of cybersecurity standards. Since security vulnerabilities incur a very high degree of financial, reputational, informational, and organizational security compromise, it is imperative that a baseline for standard compliance be established. The selection of security standards and extracting requirements from those standards in an organizational context is a tedious task. This article presents a detailed literature review, a comprehensive analysis of various cybersecurity standards, and statistics of cyber-attacks related to operating systems (OS). In addition to that, an explicit comparison between the frameworks, tools, and software available for OS compliance testing is provided. An in-depth analysis of the most common software solutions ensuring compliance with certain cybersecurity standards is also presented. Finally, based on the cybersecurity standards under consideration, a comprehensive set of minimum requirements is proposed for OS hardening and a few open research challenges are discussed.

中文翻译：

---

操作系统背景下的网络安全标准

近年来，网络威胁急剧增加。威胁领域取得了重大进展，因此迫切需要加强数字基础设施的安全性。通过将系统参数微调到最佳和优化的安全级别，可以实现更好的安全性。对于基础设施和信息系统的保护，知名组织以网络安全标准的形式提供了一些指导方针。由于安全漏洞会导致高度的财务、声誉、信息和组织安全危害，因此必须建立标准合规性基线。在组织环境中选择安全标准并从这些标准中提取要求是一项繁琐的任务。本文介绍了详细的文献综述、各种网络安全标准的综合分析以及与操作系统 (OS) 相关的网络攻击的统计数据。除此之外，还提供了可用于操作系统合规性测试的框架、工具和软件之间的明确比较。还提供了对确保符合某些网络安全标准的最常见软件解决方案的深入分析。最后，基于正在考虑的网络安全标准，提出了一套全面的操作系统强化最低要求，并讨论了一些开放的研究挑战。提供了可用于操作系统合规性测试的框架、工具和软件之间的明确比较。还提供了对确保符合某些网络安全标准的最常见软件解决方案的深入分析。最后，基于正在考虑的网络安全标准，提出了一套全面的操作系统强化最低要求，并讨论了一些开放的研究挑战。提供了可用于操作系统合规性测试的框架、工具和软件之间的明确比较。还提供了对确保符合某些网络安全标准的最常见软件解决方案的深入分析。最后，基于正在考虑的网络安全标准，提出了一套全面的操作系统强化最低要求，并讨论了一些开放的研究挑战。