A technology information and technology management system and method

Abstract

The invention discloses a scientific and technological information and technology management system and method, which relate to the field of information management technology, and include an analysis object determination module, an environment domain data chain construction module, a key link determination module, an accident occurrence rate analysis module, a technology stack generation module and a newly added early warning response module; the analysis object determination module is used to take the project data of the historical records of a scientific and technological information storage platform as the analysis object; the environment domain data chain construction module is used to build the environment domain data chain of each scientific and technological project; the key link determination module is used to generate a key link composed of multiple execution processes in each data chain; the accident occurrence rate analysis module is used to analyze the accident occurrence rate corresponding to each key link; the technology stack generation module is used to generate a technology stack with the execution process recorded in the scientific and technological project as the search item and the risk ranking as the information item; the newly added early warning response module is used to output the necessary risk management process of the newly added scientific and technological project for early warning response.

Description

Technical Field

[0001] The present invention relates to the field of information management technology, and in particular to a scientific and technological information and technical management system and method. Background Art

[0002] The science and technology information and technology management system is a comprehensive information platform that aims to effectively manage science and technology related information as well as technology research and development, application and other links, improve the efficiency of science and technology resource utilization, and promote scientific and technological innovation and development; there are some cross-domain management issues in the process of science and technology information management, such as network domain management and management domain management; in an enterprise or organization, there may be multiple different network domains, such as office network, production network, R&D network, etc., each network domain has its specific functions and security requirements. The cross-domain management of science and technology information technology equipment must ensure that the equipment can operate normally in different network domains, realize the configuration, monitoring and optimization of network connections, so that the equipment can interact and share data between network domains, while ensuring network security and performance; about management domains In large enterprises or cross-organizational projects, different departments or organizations may have their own independent management domains, but they need to cooperate with each other in business. The cross-domain management of science and technology information technology equipment must break down management barriers and realize the coordinated allocation and use of equipment resources between different management domains.

[0003] It is precisely because of these cross-domain management phenomena that the security risks of scientific and technological information are increased. How to effectively analyze the network domain or management domain management issues required for each link based on the project process, and thus infer the degree of information security risk, is the basis for quickly preparing adequate security precautions for new scientific and technological projects in different process links before implementation. Summary of the invention

[0004] The purpose of the present invention is to provide a scientific and technological information and technology management system and method to solve the problems raised in the prior art.

[0005] To achieve the above object, the present invention provides the following technical solution: a method for managing scientific and technological information and technology, characterized in that the method comprises the following steps:

[0006] Step S100: Taking the project data of the historical records of the technology information storage platform as the analysis object, extracting the environment domain data of each technology project in each execution process, and constructing the environment domain data chain of each technology project;

[0007] Step S200: Based on the environmental domain data chain of each scientific and technological project, generate a key loop consisting of multiple execution processes in each data chain;

[0008] Step S300: extracting the safety monitoring events of the key links of the same scientific and technological project records including the execution process, and analyzing the accident rate corresponding to each key link;

[0009] Step S400: extract several key loops of each scientific and technological project, determine whether there are intersecting loops based on the execution process contained in the key loops, evaluate the risk monitoring rate of each intersecting loop, traverse the risk monitoring rates of all intersecting loops recorded in the same scientific and technological project and sort them, and generate a technology stack with the execution process recorded in the scientific and technological project as the search item and the risk ranking as the information item;

[0010] Step S500: Compare the execution process and technology stack of the newly added technology project, and output the necessary risk management process of the newly added technology project for early warning response.

[0011] Furthermore, the construction of the environmental domain data chain of each scientific and technological project includes the following specific processes:

[0012] Environmental domain data includes management domain data and network domain data;

[0013] Management domain data records the management authority and policies that need to be implemented in each execution process of the scientific and technological project, and network domain data records the network technology architecture in each execution process of the scientific and technological project;

[0014] Based on the management domain, each process link is marked with the execution process sequence of the scientific and technological project, and the management authority and strategy required to be followed are recorded in each process link to generate a management domain data chain;

[0015] Based on the network domain, each process link is marked with the execution process sequence of the scientific and technological project, and the network technology architecture bound to it is recorded in each process link; a network domain data chain is generated.

[0016] Differentiating data chains into different forms can effectively conduct independent analysis from the perspective of management domain and network domain, extract redundant impact parts of information data, and achieve streamlined retrieval and analysis of scientific and technological information.

[0017] Furthermore, step S200 includes the following specific steps:

[0018] Extract the network architectures that affect each other, where the records of adjacent process links are different and need to be communicated and transmitted in the network domain data chain; traverse the network domain data chain and connect the largest independent influencing network architecture in series. The largest independent influencing network architecture refers to the independent influencing network architecture composed of several adjacent connected processes of the influencing network architectures;

[0019] The process link where the network architecture is located will be independently affected to generate the key link of the network domain data chain corresponding to the scientific and technological project record;

[0020] When extracting records of adjacent process links in the management domain data chain that include the same user executing different links and the required management permissions or application management strategies are different, the process links corresponding to the required management permissions or application management strategies are constructed into the key links of the management domain data chain of the corresponding scientific and technological project records.

[0021] The significance of analyzing the key loops is to effectively extract some potential security risks from the management domain and network domain perspectives in the execution process of scientific and technological projects, such as the cross-domain security transmission problem in the network domain key loop and the management policy conflict problem in the management domain key loop, which will increase the risk level of scientific and technological information in the entire process to a certain extent; and provide reasonable directional guidance for subsequent security supervision, investigation and analysis.

[0022] Further, the accident rate corresponding to each key link is analyzed, including the following process:

[0023] Step S310: Security monitoring events refer to events in which the platform responds to security anomalies and determines that the cause of the anomaly is any process link in the key ring and affects other process links in the key ring; extract the number of security monitoring events K1 recorded when the cause of the anomaly of each key ring is based on the network domain and the number of security monitoring events K2 recorded when the cause of the anomaly is based on the management domain;

[0024] Step S320: Obtain the total number of security monitoring events Q1 based on the network domain and the total number of security monitoring events Q2 based on the management domain recorded during the entire life cycle of the scientific and technological project, using the formula: R1=K1 / Q1, R2=K2 / Q2;

[0025] Calculate the accident rate R1 of each key link under the network domain data chain and the accident rate R2 of each key link under the management domain data chain for each scientific and technological project.

[0026] Furthermore, step S400 includes the following specific steps:

[0027] Step S410: Perform similarity analysis on the key loops in the network domain data chain and the key loops in the management domain data chain, and extract the process links with 100% similarity as the intersecting loops;

[0028] Step S420: Based on the intersecting rings, extract the accident rate R1 analyzed when the intersecting ring is in the network domain data link and the accident rate R2 analyzed when the intersecting ring is in the management domain data link, and use the formula: W=f1×R1+f2×R2 to calculate the risk monitoring rate W of each intersecting ring, where f1 and f2 represent corresponding reference coefficients;

[0029] Step S430: sort all intersecting rings in the same scientific and technological project in descending order according to the numerical values ​​of the risk monitoring rates.

[0030] Further, step S500 includes the following:

[0031] Compare and output the execution process of the newly added scientific and technological projects with the same links in the process links in the technology stack, and mark them as target links; when the risk ranking of the target link corresponding to the technology stack is unique and is in the top n, n is the set risk ranking level, and the target link is marked as a necessary risk management process; when the risk ranking of the target link corresponding to the technology stack is not unique, re-sort the target link from large to small according to the risk ranking of the technology stack and make an early warning response.

[0032] A scientific and technological information and technology management system, the system includes an analysis object determination module, an environmental domain data link construction module, a key link determination module, an accident occurrence rate analysis module, a technology stack generation module and a new warning response module;

[0033] The analysis object determination module is used to take the project data of the historical records of the science and technology information storage platform as the analysis object;

[0034] The environment domain data chain construction module is used to extract the environment domain data of each scientific and technological project in each execution process, and to construct the environment domain data chain of each scientific and technological project. The environment domain data chain includes the management domain data chain and the network domain data chain.

[0035] The key loop determination module is used to generate a key loop consisting of multiple execution processes in each data chain;

[0036] The accident rate analysis module is used to analyze the accident rate corresponding to each key link;

[0037] The technology stack generation module is used to generate a technology stack with the execution process of scientific and technological project records as the search item and the risk ranking as the information item;

[0038] The newly added early warning response module is used to compare the execution process and technology stack of new technology projects, and output the necessary risk management process of new technology projects for early warning response.

[0039] Further, the accident occurrence rate analysis module includes a safety monitoring event extraction unit and an accident occurrence rate calculation unit;

[0040] The security monitoring event extraction unit is used to extract the number of security monitoring events recorded when the abnormal causes of each key link are based on the network domain and the number of security monitoring events recorded when they are based on the management domain;

[0041] The accident rate calculation unit is used to calculate the accident rate of each key link under the network domain data chain of each scientific and technological project and the accident rate of each key link under the management domain data chain.

[0042] Furthermore, the technology stack generation module includes an intersection loop output unit, a risk monitoring rate calculation unit, and a ranking matching unit;

[0043] The intersecting loop output unit is used to perform similarity analysis on the key loops in the network domain data chain and the key loops in the management domain data chain, and extract the process links corresponding to 100% similarity as the intersecting loops;

[0044] The risk monitoring rate calculation unit is used to calculate the risk monitoring rate of each intersecting ring;

[0045] The sorting and matching unit is used to sort all intersecting rings in the same scientific and technological project in descending order according to the numerical value of the risk monitoring rate; and to generate a technology stack with the execution process of the scientific and technological project record as the search item and the risk ranking as the information item.

[0046] Compared with the prior art, the present invention has the following beneficial effects:

[0047] 1. The present invention starts from the security port of the records generated by scientific and technological information, including data considerations in two dimensions: network domain and management domain. The execution process link of scientific and technological information is used as the main line of analysis, and the environmental factors affecting information security in each process link are clearly and clearly determined; the basic security guarantee of scientific and technological information and technology is realized;

[0048] 2. The present invention establishes intersecting rings and combines historically recorded security monitoring events to digitize the information security risk levels of the process links included in the intersecting rings and output the corresponding technology stack. When a new scientific and technological project is added, it is only necessary to list the execution process in sequence and compare it with the technology stack to achieve information security risk assessment of the entire process link. The setting of the management domain and the network domain does not only stay at the trustee of information generation, but can also be reversely beneficial to the security analysis and management of scientific and technological information. BRIEF DESCRIPTION OF THE DRAWINGS

[0049] Figure 1 It is a structural schematic diagram of a scientific and technological information and technology management method of the present invention. DETAILED DESCRIPTION

[0050] Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in the field without making any creative work shall fall within the scope of protection of the present invention.

[0051] Example: Figure 1 As shown, the present invention provides a technology information and technology management system and method technical solution, a technology information and technology management method, characterized in that the method comprises the following steps:

[0052] Step S100: Taking the project data of the historical records of the technology information storage platform as the analysis object, extracting the environment domain data of each technology project in each execution process, and constructing the environment domain data chain of each technology project;

[0053] Step S200: Based on the environmental domain data chain of each scientific and technological project, generate a key loop consisting of multiple execution processes in each data chain;

[0054] Step S300: extracting the safety monitoring events of the key links of the same scientific and technological project records including the execution process, and analyzing the accident rate corresponding to each key link;

[0055] Step S400: extract several key loops of each scientific and technological project, determine whether there are intersecting loops based on the execution process contained in the key loops, evaluate the risk monitoring rate of each intersecting loop, traverse the risk monitoring rates of all intersecting loops recorded in the same scientific and technological project and sort them, and generate a technology stack with the execution process recorded in the scientific and technological project as the search item and the risk ranking as the information item;

[0056] Step S500: Compare the execution process and technology stack of the newly added technology project, and output the necessary risk management process of the newly added technology project for early warning response.

[0057] Constructing the environmental domain data chain of each scientific and technological project includes the following specific processes:

[0058] Environmental domain data includes management domain data and network domain data;

[0059] Management domain data records the management authority and policies that need to be implemented in each execution process of the scientific and technological project, and network domain data records the network technology architecture in each execution process of the scientific and technological project;

[0060] Based on the management domain, each process link is marked with the execution process sequence of the scientific and technological project, and the management authority and strategy required to be followed are recorded in each process link to generate a management domain data chain;

[0061] Based on the network domain, each process link is marked with the execution process sequence of the scientific and technological project, and the network technology architecture bound to it is recorded in each process link; a network domain data chain is generated.

[0062] Differentiating data chains into different forms can effectively conduct independent analysis from the perspective of management domain and network domain, extract redundant impact parts of information data, and achieve streamlined retrieval and analysis of scientific and technological information.

[0063] Step S200 includes the following specific steps:

[0064] Extract the network architectures that affect each other, where the records of adjacent process links are different and need to be communicated and transmitted in the network domain data chain; traverse the network domain data chain and connect the largest independent influencing network architecture in series. The largest independent influencing network architecture refers to the independent influencing network architecture composed of several adjacent connected processes of the influencing network architectures;

[0065] As shown in the embodiment: intercept part of the network domain data chain, project process approval (the network domain belongs to the office network) → production line confirmation (the network domain belongs to the production line network) → production line OA issuance (the network domain belongs to the production line network);

[0066] In the above partial network domain data chain, the influencing network architecture that can be determined is composed of "the network architecture under the project process approval and the network architecture corresponding to the production line confirmation"; in the local combination of the network domain data of the OA issued by the production line, it can be determined as the largest independent influencing network architecture;

[0067] The process link where the network architecture is located will be independently affected to generate the key link of the network domain data chain corresponding to the scientific and technological project record;

[0068] When extracting records of adjacent process links in the management domain data chain that include the same user executing different links and the required management permissions or application management strategies are different, the process links corresponding to the required management permissions or application management strategies are constructed into the key links of the management domain data chain of the corresponding scientific and technological project records.

[0069] As shown in the embodiment: if there are a sales department and a finance department, the sales department allows employees to use personal devices to access the company network for the convenience of communicating with customers, and has relatively loose software security restrictions on the devices; while the finance department has strict restrictions on device access and software security in order to ensure the security of financial data. When an employee who is responsible for both sales and finance uses a personal device, and the same user performs different links and requires different management permissions, a management policy conflict between the two departments will arise; the existing solution is to adjust the device's permissions under different management departments based on the employees themselves.

[0070] The significance of analyzing the key loops is to effectively extract some potential security risks from the management domain and network domain perspectives in the execution process of scientific and technological projects, such as the cross-domain security transmission problem in the network domain key loop and the management policy conflict problem in the management domain key loop, which will increase the risk level of scientific and technological information in the entire process to a certain extent; and provide reasonable directional guidance for subsequent security supervision, investigation and analysis.

[0071] Analyze the accident rate corresponding to each key link, including the following processes:

[0072] Step S310: Security monitoring events refer to events in which the platform responds to security anomalies and determines that the cause of the anomaly is any process link in the key ring and affects other process links in the key ring; extract the number of security monitoring events K1 recorded when the cause of the anomaly of each key ring is based on the network domain and the number of security monitoring events K2 recorded when the cause of the anomaly is based on the management domain;

[0073] Step S320: Obtain the total number of security monitoring events Q1 based on the network domain and the total number of security monitoring events Q2 based on the management domain recorded in the entire life cycle of the scientific and technological project. When the cause of the security monitoring event exists in both the management domain and the security domain, it can be repeated as a security monitoring event in each domain; using the formula: R1=K1 / Q1, R2=K2 / Q2;

[0074] Calculate the accident rate R1 of each key link under the network domain data chain and the accident rate R2 of each key link under the management domain data chain for each scientific and technological project.

[0075] Step S400 includes the following specific steps:

[0076] Step S410: Perform similarity analysis on the key loops in the network domain data chain and the key loops in the management domain data chain, and extract the process links with 100% similarity as the intersecting loops;

[0077] As shown in the embodiment: when a sales employee needs to access a customer relationship management system (CRM) through the network, the settings for the sales employee's access rights to the CRM system in the management domain are interrelated with the configuration of the employee's network access rights in the network domain. The network domain should allow the sales employee to access a specific CRM system server address and port from the office network domain according to the permission requirements of the management domain, while restricting access by other irrelevant personnel.

[0078] Step S420: Based on the intersecting rings, extract the accident rate R1 analyzed when the intersecting ring is in the network domain data link and the accident rate R2 analyzed when the intersecting ring is in the management domain data link, and use the formula: W=f1×R1+f2×R2 to calculate the risk monitoring rate W of each intersecting ring, where f1 and f2 represent corresponding reference coefficients; which can be set by the system;

[0079] Step S430: sort all intersecting rings in the same scientific and technological project in descending order according to the numerical values ​​of the risk monitoring rates.

[0080] Step S500 includes the following:

[0081] Compare and output the execution process of the newly added scientific and technological projects with the same links in the process links in the technology stack, and mark them as target links; when the risk ranking of the target link corresponding to the technology stack is unique and is in the top n, n is the set risk ranking level, and the target link is marked as a necessary risk management process; when the risk ranking of the target link corresponding to the technology stack is not unique, re-sort the target link from large to small according to the risk ranking of the technology stack and make an early warning response.

[0082] A scientific and technological information and technology management system, the system includes an analysis object determination module, an environmental domain data link construction module, a key link determination module, an accident occurrence rate analysis module, a technology stack generation module and a new warning response module;

[0083] The analysis object determination module is used to take the project data of the historical records of the science and technology information storage platform as the analysis object;

[0084] The environment domain data chain construction module is used to extract the environment domain data of each scientific and technological project in each execution process, and to construct the environment domain data chain of each scientific and technological project. The environment domain data chain includes the management domain data chain and the network domain data chain.

[0085] The key loop determination module is used to generate a key loop consisting of multiple execution processes in each data chain;

[0086] The accident rate analysis module is used to analyze the accident rate corresponding to each key link;

[0087] The technology stack generation module is used to generate a technology stack with the execution process of scientific and technological project records as the search item and the risk ranking as the information item;

[0088] The newly added early warning response module is used to compare the execution process and technology stack of new technology projects, and output the necessary risk management process of new technology projects for early warning response.

[0089] The accident occurrence rate analysis module includes a safety monitoring event extraction unit and an accident occurrence rate calculation unit;

[0090] The security monitoring event extraction unit is used to extract the number of security monitoring events recorded when the abnormal causes of each key link are based on the network domain and the number of security monitoring events recorded when they are based on the management domain;

[0091] The accident rate calculation unit is used to calculate the accident rate of each key link under the network domain data chain of each scientific and technological project and the accident rate of each key link under the management domain data chain.

[0092] The technology stack generation module includes an intersection loop output unit, a risk monitoring rate calculation unit, and a sorting and matching unit;

[0093] The intersecting loop output unit is used to perform similarity analysis on the key loops in the network domain data chain and the key loops in the management domain data chain, and extract the process links corresponding to 100% similarity as the intersecting loops;

[0094] The risk monitoring rate calculation unit is used to calculate the risk monitoring rate of each intersecting ring;

[0095] The sorting and matching unit is used to sort all intersecting rings in the same scientific and technological project in descending order according to the numerical value of the risk monitoring rate; and to generate a technology stack with the execution process of the scientific and technological project record as the search item and the risk ranking as the information item.

[0096] Finally, it should be noted that the above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art can still modify the technical solutions described in the aforementioned embodiments or replace some of the technical features therein by equivalents. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A method for managing scientific and technological information and technology, characterized in that: The method comprises the following steps: Step S100: Taking the project data of the historical records of the technology information storage platform as the analysis object, extracting the environment domain data of each technology project in each execution process, and constructing the environment domain data chain of each technology project; Step S200: Based on the environmental domain data chain of each scientific and technological project, generate a key loop consisting of multiple execution processes in each data chain; Step S300: extracting the safety monitoring events of the key links of the same scientific and technological project records including the execution process, and analyzing the accident rate corresponding to each key link; Step S400: extract several key loops of each scientific and technological project, determine whether there are intersecting loops based on the execution process contained in the key loops, evaluate the risk monitoring rate of each intersecting loop, traverse the risk monitoring rates of all intersecting loops recorded in the same scientific and technological project and sort them, and generate a technology stack with the execution process recorded in the scientific and technological project as the search item and the risk ranking as the information item; The step S400 includes the following specific steps: Step S410: Perform similarity analysis on the key loops in the network domain data chain and the key loops in the management domain data chain, and extract the process links with 100% similarity as the intersecting loops; Step S420: Based on the intersecting rings, extract the accident rate R1 analyzed when the intersecting ring is in the network domain data link and the accident rate R2 analyzed when the intersecting ring is in the management domain data link, and use the formula: W=f1×R1+f2×R2 to calculate the risk monitoring rate W of each intersecting ring, where f1 and f2 represent corresponding reference coefficients; Step S430: sorting all intersecting rings in the same scientific and technological project in descending order according to the numerical values ​​of the risk monitoring rates; Step S500: Compare the execution process and technology stack of the newly added technology project, and output the necessary risk management process of the newly added technology project for early warning response.

2. A method for scientific and technological information and technology management according to claim 1, characterized in that: The construction of the environmental domain data chain of each scientific and technological project includes the following specific processes: The environmental domain data includes management domain data and network domain data; The management domain data records the management authority and policies required to be executed in each execution process of the scientific and technological project, and the network domain data records the network technology architecture in each execution process of the scientific and technological project; Based on the management domain, each process link is marked with the execution process sequence of the scientific and technological project, and the management authority and strategy required to be followed are recorded in each process link to generate a management domain data chain; Based on the network domain, mark each process link with the execution process sequence of the scientific and technological project, and record the network technology architecture bound to each process link; Generates a network domain data link.

3. A method for scientific and technological information and technology management according to claim 2, characterized in that: The step S200 includes the following specific steps: Extract the network architectures that affect each other, where the records of adjacent process links are different and need to be communicated and transmitted in the network domain data chain; traverse the network domain data chain and connect the largest independent influencing network architecture in series, where the largest independent influencing network architecture refers to an independent influencing network architecture consisting of several adjacent connected processes of the influencing network architectures; The process link where the network architecture is located will be independently affected to generate the key link of the network domain data chain corresponding to the scientific and technological project record; When extracting records of adjacent process links in the management domain data chain that include the same user executing different links and the required management permissions or application management strategies are different, the process links corresponding to the required management permissions or application management strategies are constructed into the key links of the management domain data chain of the corresponding scientific and technological project records.

4. A method for scientific and technological information and technology management according to claim 3, characterized in that: The analysis of the accident rate corresponding to each key link includes the following processes: Step S310: The security monitoring event refers to an event in which the platform responds to a security anomaly and determines that the cause of the anomaly is any process link in the key ring and affects other process links in the key ring; extract the number of security monitoring events K1 recorded when the cause of the anomaly of each key ring is based on the network domain and the number of security monitoring events K2 recorded when the cause of the anomaly is based on the management domain; Step S320: Obtain the total number of security monitoring events Q1 based on the network domain and the total number of security monitoring events Q2 based on the management domain recorded during the entire life cycle of the scientific and technological project, using the formula: R1=K1 / Q1, R2=K2 / Q2; Calculate the accident rate R1 of each key link under the network domain data chain and the accident rate R2 of each key link under the management domain data chain for each scientific and technological project.

5. A method for managing scientific and technological information and technology according to claim 4, characterized in that: The step S500 includes the following: Compare and output the execution process of the newly added science and technology project with the same links in the process links in the technology stack, and mark them as target links; when the target link corresponds to the unique risk ranking in the technology stack and is in the top n, n is the set risk ranking level, and the target link is marked as a necessary risk management process; When the risk ranking of the target link in the corresponding technology stack is not unique, the target link is re-sorted from large to small according to the risk ranking of the technology stack and an early warning response is made.

6. A scientific and technological information and technology management system, using a scientific and technological information and technology management method according to any one of claims 1 to 5, characterized in that: The system includes an analysis object determination module, an environmental domain data link construction module, a key link determination module, an accident occurrence rate analysis module, a technology stack generation module and a new warning response module; The analysis object determination module is used to take the project data of the historical records of the scientific and technological information storage platform as the analysis object; The environment domain data chain construction module is used to extract the environment domain data of each scientific and technological project in each execution process, and construct the environment domain data chain of each scientific and technological project, and the environment domain data chain includes a management domain data chain and a network domain data chain; The key loop determination module is used to generate a key loop consisting of multiple execution processes in each data chain; The accident occurrence rate analysis module is used to analyze the accident occurrence rate corresponding to each key link; The technology stack generation module is used to generate a technology stack with the execution process of the scientific and technological project record as the search item and the risk ranking as the information item; The newly added early warning response module is used to compare the execution process and technology stack of the newly added scientific and technological projects, and output the necessary risk management process of the newly added scientific and technological projects for early warning response.

7. A scientific and technological information and technology management system according to claim 6, characterized in that: The accident occurrence rate analysis module includes a safety monitoring event extraction unit and an accident occurrence rate calculation unit; The safety monitoring event extraction unit is used to extract the number of safety monitoring events recorded when the abnormal causes of each key link are based on the network domain and the number of safety monitoring events recorded when they are based on the management domain; The accident rate calculation unit is used to calculate the accident rate of each key link of each scientific and technological project based on the network domain data chain and the accident rate of each key link based on the management domain data chain.

8. A scientific and technological information and technology management system according to claim 6, characterized in that: The technology stack generation module includes an intersection ring output unit, a risk monitoring rate calculation unit and a sorting matching unit; The intersecting ring output unit is used to perform similarity analysis on the key rings in the network domain data chain and the key rings in the management domain data chain, and extract the process links corresponding to 100% similarity as the intersecting rings; The risk monitoring rate calculation unit is used to calculate the risk monitoring rate of each intersecting ring; The sorting and matching unit is used to sort all intersecting rings in the same scientific and technological project in descending order according to the numerical value of the risk monitoring rate; and generate a technology stack with the execution process of the scientific and technological project record as the search item and the risk ranking as the information item.

Images