Service method and system based on network security, and electronic equipment

The invention discloses a service method and system based on network security, and electronic equipment. The method comprises the following steps: step 1, file static analysis; 2, dynamically analyzing the file; step 3, false alarm judgment; 4, updating the database; the system comprises a static analysis module, a dynamic analysis module, an abnormal file analysis module, a database updating module and a data storage module. Static analysis is combined with dynamic analysis to perform anomaly recognition on the file, so that the problem of hysteresis of single static analysis is solved, and the recognition capability of the abnormal file is enhanced; according to the method, the file content is subjected to optimization processing and dichotomy extraction, so that the data volume of data analysis is reduced, the time consumption of the detection process is reduced, and the analysis speed is increased; according to the method, the database is updated based on the user behavior, and the abnormal file is subjec