Abstract
Assurance is a measure of confidence in a system based upon a composition of its trust, correctness, integrity, security, and reliability. Cyber-assurance is defined as a means of internet of things (IoT) smart devices and networks providing the opportunity of automatically securing themselves against security threats; the concept of cyber-assurance must provide embedded security within these IoT devices to allow these new networks to operate correctly even when subjected to a cyber-attack. Assurance is the evidence, which convinces us that an above-defined property holds. Techniques such as testing, disciplined development, formal methods, and others to build up evidence for each of these desired properties. This chapter defines trust as confidence based on the available evidentiary mechanisms that the software that will behave reliably and correctly while maintaining the integrity and security of itself and the system in which it is embedded. An assurance strategy is a plan for how to provide the evidence that a system merits our trust.