[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now


Cloning systems for testing

Posted on 2011-04-27
Medium Priority
Last Modified: 2012-06-27
How practical / realistic is it for when the pen testers to come in to clone applications/servers so they can run there pen test tools on a cloned environment that mirrors the live application and infrastructure for business continuity purposes?  Say we have an asp.net IIS/SQL Server web app, but we dont want them ruinning thorough attack tools against the live system, is it easy to make a replica copy and let them run their tools and manual tests against a clone? Does cloning it mess up all the code, i.e. will the app not work if you essentially pick it up and move it? Any feedback welcome - management speak preferred.
Question by:pma111

Accepted Solution

dan4132 earned 500 total points
ID: 35473750
What about using something like VMWare to do this? Make an image of your server and upload it to a VM? That way you could run as many VM's as you wanted (resource allowing of course) and not have to worry about crashing the Live products.

Author Comment

ID: 35473756
Will a clone of the app not affect its functionality?
LVL 23

Assisted Solution

OP_Zaharin earned 500 total points
ID: 35717216
- cloning or setting up a copy of the production database for testing purposes is the right approach. we did not want the production data to be messed up with the test and we did not want any performance affected prior to the test. further to that the tester will also get to test on a 'real' data as of the cloning date. 

- however they might complaining - "it is not the real environment" and they insist of doing it on production server as it is understand that they have to provide detail report on every aspect. you can arguing back by telling them to prove that their test tool works on the cloning environment first before going to the prod.

"is it easy to make a replica copy"
- depending on what database/application you use. the product might have special feature or function to do cloning/copy. 

"Does cloning it mess up all the code, i.e. will the app not work if you essentially pick it up and move it?"
- do you mean your application code? you can setup the clone database and application server on another server (not on the prod server), configure your 'clone' application to read the clone database instead. you also might to install and setup any 3rd party software/library that is used by that application(if such is used). this is to ensure no functionality affected. it might require additional work to do so, but this will ensuring your production db and app is safe.

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article, we’ll look at how to deploy ProxySQL.
Strategic internal linking is often considered an SEO power technique, especially for content marketing. Do you need to hire an SEO agency to optimize you internal linking? No, this article will help you understand the basics of internal linking and…
Video by: Steve
Using examples as well as descriptions, step through each of the common simple join types, explaining differences in syntax, differences in expected outputs and showing how the queries run along with the actual outputs based upon a simple set of dem…
In this video, Percona Solution Engineer Rick Golba discuss how (and why) you implement high availability in a database environment. To discuss how Percona Consulting can help with your design and architecture needs for your database and infrastr…
Suggested Courses

834 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question