In order to explore the negativity and universality of security incidents，a reverse thinking paradigm based on Negative Systems Theory in safety science was first applied in conjunction with the Ecosystem Theory from systems science. This approach identified the characteristics of intelligent systems—openness，inclusivity，interactive coupling，and dynamic balance—and clarified the logical framework for intelligent system security analysis. Subsequently，the sources of security incident hazards were identified from the perspective of negative systems theory，and the mechanisms behind security incidents were explained. The concept of cohesive coupling was introduced，and an s-shaped framework model was proposed to analyze the stability of subsystems within intelligent systems and investigate their underlying technological support. Finally，using the concepts of producers，transmitters，consumers，and decomposers，the dynamic balance of information flow throughout the entire process in intelligent systems was analyzed，collectively shaping the security analysis framework under the negative systems theory perspective. The results indicated that the security analysis framework established under the negative systems theory perspective could effectively analyze the secure and stable operation as well as the dynamic balance of information flow throughout intelligent systems，ensuring the comprehensiveness and reliability of intelligent system security analysis.