Exploration and Practice of the Experiment Teaching of Web Application Security Course

In the experiment teaching of Web application security course, we introduce a teaching assistant system - DVWA, which is vulnerable to the most common types of web application. We design the experiment cases for each Web application vulnerability from two aspects of attack and defense based on DVWA, and apply the multi-round progressive attack-defense confrontation mode to organize the experiment teaching. Teaching practice shows that the method increases the interest of students' learning and improves their ability of Web attack-defense.