Experimental teaching of information system security based on BBF model

To effectively achieve the experimental teaching objectives of information system security course, this paper analyzes the problems existing in traditional experimental teaching of information system security course, proposes an offensive and defensive experimental teaching mode based on BBF model, and discusses how to comprehensively enhance students' innovation and practical abilities through the design of the three core elements of BBF mode: system construction, attack penetration, and security repair. Taking SQL injection as an example, this paper introduces the implementation scheme of BBF-based offensive and defensive experimental teaching, and evaluates the teaching effect.