CMS - Analysis tab

Mon, 01 Jan 0001 00:00:00 +0000

Analysis tab

This tab allows you to define various specific options (organized by Technology) for all Analysis Units defined in the Application - these options govern the way in which the source code matching the Technology type will be handled during the analysis.

The CAST Management Studio will automatically determine the Technology type of an Analysis Unit when the packages are deployed and the Analysis Units are created. As such, all Technologies that are present in the Analysis Units in your Application will be visible in this tab, for example:

CMS - Architecture Models tab

Mon, 01 Jan 0001 00:00:00 +0000

Architecture Models tab

This tab allows you to associate an Architecture Model to your Application. See CAST Architecture Checker for more information about this feature.

Add an existing Architecture Model

Click the button to add an existing Architecture Model.
A dialog box will be displayed enabling you to select the Architecture Model(s) you want to associate to the current Application. Select the Architecture Model and click OK (if no Architecture Models are visible, you can create Architecture Models in the Architecture Models view):

CMS - Content Enrichment tab

Mon, 01 Jan 0001 00:00:00 +0000

Content Enrichment tab

This tab allows you to manage specific tools that can be run before or after an analysis to enrich the content of the final snapshot or achieve a specific aim.

Options and list explanation

Options are valid for both tables (before and after analysis tables):

Use this option to add a new Tool. When you select the option a list of available Tools will be displayed - this list will differ dependent on whether the Tool will run before or after the analysis (some Tools cannot be run before an analysis):

CMS - Current Version tab

Mon, 01 Jan 0001 00:00:00 +0000

Current Version tab

The Current Version tab lists and enables you to manage:

the packages that have been deployed during the Set As Current Version action (see Delivery tab)
the Analysis Units automatically created for each package

Deployed Packages

This section lists the packages that have been deployed during the Set As Current Version action (see Delivery tab). A package is listed as follows:


Type	Shows the package type as defined by the Delivery Manager in the CAST Delivery Manager Tool.
Package name	Shows the name of the package as defined by the Delivery Manager in the CAST Delivery Manager Tool.
Deployment Path	Shows the deployment path of the package - the path will point to a folder in the source code Deployment Folder (see Preferences - Platform Setting).

Selecting a package will display the Analysis Units that have been automatically created from the source code in the package.

CMS - Delivery tab

Mon, 01 Jan 0001 00:00:00 +0000

Delivery tab

This tab allows you to manage the source code deliveries (Versions) packaged either:

by your Delivery Managers using the CAST Delivery Manager Tool via the CAST AIC Portal
by yourself directly from the CAST Delivery Manager Tool launched from the CAST Management Studio

This tab is interacting directly with the Source Code Delivery Folder (see Preferences - Platform Setting for more information).

Buttons


	Refresh	Use this option to refresh the current status of your source code Deliveries. The CAST Management Studio will connect directly to the Source Code Delivery Folder (see Preferences - Platform Setting for more information) to obtain up-to-date information.
	Add version	Use this option to add a new source code Version - the Add version wizard will be launched enabling you to define the new version. Please note that CAST recommends that your Delivery Managers create the Versions themselves in the CAST Delivery Manager Tool - this is because only they know what version of the source code they are packaging for you.

Versions in the Delivery Folder

This section lists the current status of any Versions stored in the source code Delivery Folder (i.e. packaged by the Delivery Managers or by yourself). Using the Refresh option will update the status of each section.

CMS - Dependencies - Refined Target tab

Mon, 01 Jan 0001 00:00:00 +0000

Dependencies - Refined Target tab

This tab is only visible in Advanced or Expert Audience mode. It allows you to manage Refined Targets that can be used in the Rules tab.

As explained in the Rules tab, CAST will discover and create dependencies between Analysis Units or Technologies to ensure that links between objects (for example client side code to database code) are recorded in the CAST Analysis Service.

Dependencies that are a created by CAST will be either between Analysis Units or between Technologies (where no dependencies between Analysis Units have been discovered) and this level of dependency is generally quite broad. As such, there is a possibility that incorrect links may be traced if a string happens to match a given name even if it is not logically related to the corresponding object.

CMS - Dependencies - Rules tab

Mon, 01 Jan 0001 00:00:00 +0000

Dependencies - Rules tab

This tab enables you to manage all the dependency rules for the Technologies in the Application.

When a dependency exists and during the analysis process, source code corresponding to the Technologies/Analysis Units in the Source column is scanned for references to objects in source code corresponding to the Technologies/Analysis Units in the Target column. If any matches are found, then a link between the two objects will be created (this will be visible in CAST Enlighten or in the CAST Discovery Portal).

CMS - Dependencies tab (rules)

Mon, 01 Jan 0001 00:00:00 +0000

Dependencies tab

This tab governs the dependency Rules configured for this Application - dependency Rules govern the links that are created between objects during an analysis.

Within the tab are two further tabs, each is explained in its own page:

CMS - Execute tab

Mon, 01 Jan 0001 00:00:00 +0000

Execute tab

The Execute tab enables you to govern the analysis and snapshot execution, where the snapshots will be stored and the existing snapshots themselves.

General options

Take a snapshot of the application

This option will start the snapshot generation process. All Analysis Units, analysis options, production options and other configuration settings will be taken into account.

Prepare Snapshot

This option will run a special function (the pre-snapshot preparation action) that prepares the Analysis Service for snapshot generation.

It is ONLY necessary to run this option when you have used the Run Analysis only option AND when you are using the CAST Architecture Checker/CAST Transaction Configuration Center and want to run specific options (such as Compute in the CAST Transaction Configuration Center).

CMS - Function Points tab

Mon, 01 Jan 0001 00:00:00 +0000

Function Points tab

This tab allows you to select the measurement mode that is used to calculated Enhancement Function Points.

Enhancement Measure is performed with:

Choose the measurement mode you require. You can find out more information about each mode by searching doc.castsoftware.com for “CAST OMG-compliant Automated Function Points”.

Automated Enhancement Points (recommended)

CAST integrates the estimation of OMG Automated Enhancement Points (AEP). With the AEP feature, CAST AIP displays detailed information about the changes done on both the functional and technical sides between two versions or two snapshots of an application.

Like EFP (see below), the feature helps to evaluate overtime the size of evolutions implemented by teams producing applications. It computes and displays data functions and transactional functions that have been modified, added, or deleted, and information on the technical components of applications that do not belong to any transaction. The unadjusted function points that are calculated are weighted with Complexity Factors based on the objects complexity.

CMS - Modules tab

Mon, 01 Jan 0001 00:00:00 +0000

Modules tab

This tab is used to manage the Modules (both automatic and user defined) for your current Application. Modules are used extensively in the CAST Dashboard as a means to configure analysis results into meaningful groups or sets for display purposes - indeed objects cannot be seen in the CAST Dashboard if they are not part of a Module. The content of a module is based on source code.

CMS - Notes tab

Mon, 01 Jan 0001 00:00:00 +0000

Notes tab (application)

This tab provides information about the Application:

Description

Use this field to enter a description about the current Application to help distinguish it.

Application ID

This field is read-only and displays the unique Application ID of the current Application.

Email to send reports

Use this field to enter an email address that will receive reports about the current Application.

Emails will only be sent when:

You choose to receive emails when you trigger a snapshot generation or when you use the Run analysis only option (by ticking the Send email report option)
If the Mail preferences have been populated correctly.

You can use the Send a test email option to test this functionality.

CMS - Production tab

Mon, 01 Jan 0001 00:00:00 +0000

Production tab

This tab allows you to define various specific production options (organized by Technology) for all Analysis Units defined in the Application - these options govern the way in which the source code matching the Technology type will be handled during the analysis - in particular for the resulting objects and links.

CMS - User Input Security tab

Mon, 01 Jan 0001 00:00:00 +0000

User Input Security tab

Note that in CAST AIP 8.3.0 - 8.3.9, the User Input Security tab contains options that enable you to add custom sanitization, input and target methods. Even though these options exist and can be used, they do not function and any custom methods that are added will be ignored in an analysis. The options will be removed in CAST AIP 8.3.10.

Notes

The options in this tab are valid for ALL Analysis Units defined in the current Application.
User Input Security is only run when you Generate a Snapshot.

Introduction

In order to detect User Input Security flaws, CAST provides an optional analysis feature that implements a dataflow algorithm to detect variables that flow from the user down to a critical resource without prior sanitization, allowing hackers to send them data that will harm IT applications (security vulnerabilities).

CMS - Application editor on Documentation - V2

CMS - Analysis tab

Analysis tab

CMS - Architecture Models tab

Architecture Models tab

Add an existing Architecture Model

CMS - Content Enrichment tab

Content Enrichment tab

Options and list explanation

CMS - Current Version tab

Current Version tab

Deployed Packages

CMS - Delivery tab

Delivery tab

Buttons

Versions in the Delivery Folder

CMS - Dependencies - Refined Target tab

Dependencies - Refined Target tab

CMS - Dependencies - Rules tab

Dependencies - Rules tab

CMS - Dependencies tab (rules)

Dependencies tab

CMS - Execute tab

Execute tab

General options

CMS - Function Points tab

Function Points tab

Enhancement Measure is performed with:

CMS - Modules tab

Modules tab

CMS - Notes tab

Notes tab (application)

CMS - Production tab

Production tab

CMS - User Input Security tab

User Input Security tab

Introduction