CAST Imaging consists of different components and products:
At a broad level, the workflow below shows the process of onboarding application source code through AIP Console. AIP Console generates application source code metadata by reverse-engineering front-end, middleware, and back-end code. The application data is then automatically imported into CAST Imaging for investigation purposes:
Click to enlarge
AIP Console is a front end web application that can be installed on Microsoft Windows or Linux and provides services that are required to configure and run analyses remotely on multiple analysis machines. It supports the full analysis process from registering the application, delivering the source code to producing the snapshots and viewing the result in CAST Imaging. AIP Console is designed such that it allows you to:
Click to enlarge
Data produced by the AIP Core analysis engine needs to be stored somewhere before it can be "consumed". This requirement is fulfilled by the open-source RDBMS PostgreSQL which CAST AIP is optimized to work with. PostgreSQL has been chosen largely due to its low cost (i.e. free) and fast performance. CAST provides PostgreSQL as a custom Windows installable package known as CAST Storage Service, or it can be installed on all mainstream Linux distributions via the repository system. CAST highly recommends the use of PostgreSQL on a Linux instance as this consistently gives the best performance during analyses.
Results produced by the AIP Core analysis engine are consumed/exploited for the most part via browser based application called CAST Imaging. This is delivered as a separate standalone package and can be installed on Windows (directly or via Docker) or Linux (via Docker).