PDF
Full
Outline
Amidst an increasingly severe cybersecurity landscape, the widespread adoption of Xinchuang endpoints has become a strategic imperative. Governments and enterprises have established terminal localization as a critical objective, aiming for comprehensive indigenous replacement through rapid technological iteration. Consequently, Xinchuang systems and Windows platforms are expected to coexist over an extended period. This study seeks to establish an automated verification framework for multi-version operating systems and validate the efficacy of baseline hardening in mitigating security risks.
Based on the Classified Protection 2.0 framework and relevant national standards for endpoint security, this study proposes an endpoint security baseline verification scheme applicable to multiple operating systems. The scheme addresses divergent security policies and implementation methodologies across heterogeneous environments. It automates the inspection of core baselines, including account password complexity, default shared service status and patch installation status. Furthermore, a comprehensive scoring model is established by incorporating differentiated weights for account security, patch management and log auditing, ultimately generating visualized risk reports to facilitate remediation prioritization.
This study reveals that baseline configuration serves as the fundamental prerequisite in endpoint security practices. Through a scalable detection engine and quantitative scoring model, the system can promptly identify and remediate potential risks, thereby reducing the attack surface and mitigating intrusion risks. However, on certain domestic chip architectures, compatibility issues persist in detecting specific configuration items. Further improvement in hardware–software co-adaptation for domestic platforms is required to advance the development of localized security protection systems.
Through in-depth research on security baseline configurations across multiple operating systems, this study implements an automated and visualized baseline verification methodology. This approach significantly strengthens the security posture of domestic operating systems and supports the establishment of a more robust, national-level cybersecurity defense framework.
PDF
9
1
| 科 Family | 属数 Number of genus | 种数 Number of species | 占总种数比例 Percentage of total species (%) | 属 Genus | 种数 Number of species | 占总种数比例 Percentage of total species (%) |
|---|---|---|---|---|---|---|
| 鹅膏菌科Amanitaceae | 2 | 11 | 5.26 | 鹅膏菌属 Amanita | 10 | 4.78 |
| 小菇科 Mycenaceae | 2 | 12 | 5.74 | 丝盖伞属 Inocybe | 5 | 2.39 |
| 多孔菌科 Polyporaceae | 8 | 14 | 6.70 | 蜡蘑属 Laccaria | 5 | 2.39 |
| 红菇科 Russulaceae | 3 | 23 | 11.00 | 小皮伞属 Marasmius | 6 | 2.87 |
| 小菇属 Mycena | 11 | 5.26 | ||||
| 光柄菇属 Pluteus | 5 | 2.39 | ||||
| 红菇属 Russula | 17 | 8.13 | ||||
| 栓菌属 Trametes | 5 | 2.39 |
关闭全屏
No. 86 Xueyuan South Road, Haidian District, Beijing
010-62199257
qkjq@cast.org.cn
Copyright © 2025 China Association for Science and Technology. All rights reserved. For all open access content, the relevant licensing terms apply.
Sponsored by the Office of the Leading Group for Cybersecurity and Informatization of CAST, and supported by Science and Technology Review Publishing House
