The invention relates to the technical field of
server security protection, and discloses a
server security protection method and
system. The method comprises the following steps: executing dynamic tracking of a
server running state to obtain running data; performing protocol behavior collaborative analysis on the tracking result to generate a protocol interaction map representing a complex calling relationship between services; performing multi-level security
threat assessment based on the map, and identifying an abnormal
interaction mode deviating from a normal baseline; positioning a core
risk area, performing real-time protection strategy
adaptation, and generating a dynamic security strategy instruction; and finally executing the instruction to complete safety protection. According to the method, conversion from isolated
event analysis to
system relation modeling is realized by constructing the protocol interaction atlas, so that a complex
attack chain can be accurately identified; through dynamic strategy
adaptation based on a graph structure, protection upgrading from extensive blocking to accurate minimization intervention is realized, the
threat detection capability is improved, and the service continuity is guaranteed.