Body: <p>I would like to fuzz test our web services in our development environment but I do not want to pollute the database with data from the fuzz test.  We do not currently have an automated way of creating a new database and I would like to fuzz test with what we have.  How do other organizations handle this type of issue?</p>
  
Comments: CC BY-SA 4.0
Comments: 2020-08-18T09:30:07.580Z
Comments: Perhaps creating a database instance for the duration of the test, using a snapshot of the production database might work? Just as with mocks, you can stand up a backing infrastructure with terraform or similar and then destroy it as part of the teardown stage.
Comments: Bruce Becker
Comments: CC BY-SA 4.0
Comments: 2020-08-18T09:37:39.520Z
Comments: Perhaps you might find chapter 13 (Testing) section 4 (Fuzz Testing) of Google's [SRS book](https://landing.google.com/sre/resources/foundationsandprinciples/srs-book/) useful.
Comments: Bruce Becker
Tags: <devsecops>
Title: Fuzz testing web service in development environment
UserDisplayName: CLJ
ThreadText: # Fuzz testing web service in development environment
  
  (Asked by: username_0 on 2020-08-17)
  
  I would like to fuzz test our web services in our development environment but I do not want to pollute the database with data from the fuzz test. We do not currently have an automated way of creating a new database and I would like to fuzz test with what we have. How do other organizations handle this type of issue?
  
  **Tags:** devsecops
  
  > **Comments:**
  > **username_1**: Perhaps creating a database instance for the duration of the test, using a snapshot of the production database might work? Just as with mocks, you can stand up a backing infrastructure with terraform or similar and then destroy it as part of the teardown stage.  
  > **username_1**: Perhaps you might find chapter 13 (Testing) section 4 (Fuzz Testing) of Google's [SRS book](https://landing.google.com/sre/resources/foundationsandprinciples/srs-book/) useful.  
  
  ---
  
  ## 0 answers
  
  