A system for security management of a server is disclosed. The system includes an application server (1), at least a LAN server (2), a firewall (3), and a connection to the Internet (4). The LAN server is capable of updating the application server automatically and periodically so as to improve protection against the latest viruses. The application server includes a database (20), a database backup module (30), a database recovery module (40) and a file management module (50). By using this system, the application server is able to be upgraded automatically and securely, and the backup and recovery of database could be realized steadily and swiftly. Therefore, the security management of all files is achieved.