{"id":3262,"date":"2026-01-30T00:00:00","date_gmt":"2026-01-29T23:00:00","guid":{"rendered":"https:\/\/kunden.weissblaumedia.de\/microconsult\/2019\/10\/15\/ps_sichere-software-1\/"},"modified":"2026-02-09T07:21:17","modified_gmt":"2026-02-09T06:21:17","slug":"ps_secure-software-1","status":"publish","type":"post","link":"https:\/\/www.microconsult.de\/en\/ps_sichere-software-1\/","title":{"rendered":"Taming the Dragon \u2013 Secure Software from the Start (Part 1)"},"content":{"rendered":"

Developers under time pressure<\/h3>\n

Just as dragons plagued humans and threatened their lives in ancient myths, today technically unsafe systems pose a source of danger. The crucial difference: while dragons belong to the realm of fables, technical systems as potential sources of danger are part of our everyday lives.<\/strong><\/p>\n

<\/p>\n

When we encounter embedded systems, which happens to each of us countless times every day, we assume these systems are secure \u2013 or we simply don't think about it. But what does security actually mean?<\/p>\n

We fundamentally distinguish between operational safety (Safety) and access security (Security). While Safety aims to protect people when using a system, Security is about protecting against people or their "tools for intrusion," i.e., misuse and unauthorized access. The difference becomes clear when considering the example of an entrance door: A pinch guard designed to prevent injuries, or a sensor that stops a revolving door in case of danger, fall under the category of Safety. A surveillance camera, on the other hand, or access control via fingerprint, are clearly part of Security.<\/p>\n

In many companies, the goal of software is still simply that it runs \u2013 and that's far too little. It's like saying: as long as the car runs, I don't care if the brakes work or the windshield wipers function correctly. Due to time constraints, developers are far too often forced to cut corners.<\/p>\n

To stay with the metaphor: We're raising a fire-breathing dragon and not taking the time to teach it good manners, such as not sneezing on people.<\/p>\n

There is a lack of knowledge on how to formulate security requirements.<\/h4>\n

Among the greatest threats to both operational reliability and security are untested code, unintended interactions within the architecture, and, above all, a lack of qualifications among those responsible for software development. Unfortunately, the knowledge of how to formulate security requirements and then actually implement them in the software is all too often lacking.<\/p>\n

Management often doesn't consider safety.<\/h4>\n

Project teams need to be made aware early on that writing code is the very least of it. Security comes from being able to implement specific architectural features and adhere to rules that support this security. This knowledge is often insufficiently taught in formal education \u2013 and is usually completely unknown to career changers. Engineers such as electrical engineers, mechanical engineers, or physicists are generally competent in their respective fields, but there are often weaknesses in software development. A lack of qualifications is also the root cause of another threat: purchased software. Anyone who is unable to develop operationally reliable software cannot verify whether the security requirements are actually met, even in purchased programs. This problem is by no means limited to the developer level. Management often overlooks safety and believes it can offload this perceived nuisance onto external parties. Project participants often lack both the necessary overview and awareness.<\/p>\n

Absolute freedom from errors is illusory.<\/h4>\n

The lack of safety awareness is all the more astonishing when one considers the potential consequences. A dissatisfied customer may lead to financial losses. While this can also become a serious problem, it is relatively harmless compared to a case where people are harmed due to inadequate operational safety. In such a case, the developer must also expect drastic consequences if they have failed to meet requirements. Conversely, comprehensive documentation of development and testing makes it easy to refute such accusations. Developers are often unaware that safety standards reflect the state of the art and that our work\u2014if we fail to meet these standards\u2014is technically deficient.<\/p>\n

Since standards are difficult for developers to interpret, it is important to involve the relevant auditors early in the development process. Safety standards are like recipes for electronics and software that reflect the state of the art. Just as you have to adapt recipes to your own kitchen, you also have to adapt standards to your own needs.<\/p>\n

And absolute freedom from defects is virtually illusory. Zero defects are desirable, but physically unattainable. The operational reliability of a technical system is understood as the reduction of risk to an (economically) acceptable level. This means that tolerable residual defects remain in our technical systems. Appropriate fault detection and response measures must be implemented.<\/p>\n

The second part of the series<\/a> It will go into detail that safety and quality are not accidental, but rather the result of targeted measures throughout the entire development process. In the third part, embedded experts offer advice and statements on quality and safety.<\/p>\n

Go to calendar view<\/h3>\n

Taming the dragon \u2013 Secure software from the start:
\nPart 2 \u201eQualify and inform all project participants\u201c<\/a><\/p>\n

Taming the dragon \u2013 Secure software from the start:
\nPart 3 \u201eAdvice and statements on quality and safety\u201c<\/a><\/p>\n

<\/p>\n

Further information<\/h3>\n

MicroConsult Training & Coaching on the topic <\/strong>Quality, Safety & Security<\/strong><\/a><\/p>\n

MicroConsult expertise in the areas of quality, safety & security<\/strong> <\/a><\/p>\n

Peter Siwon: Systemic project management<\/p>","protected":false},"excerpt":{"rendered":"

Developers under time pressure: Just as dragons plagued humans and threatened their lives in ancient myths, today technically insecure systems represent a source of danger. The crucial difference: While dragons belong to the realm of fables, technical systems as potential sources of danger are part of our everyday lives.<\/p>","protected":false},"author":3,"featured_media":3263,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","inline_featured_image":false,"footnotes":""},"categories":[30,51,70],"tags":[26,13,80,237,238,165,69,239],"class_list":["post-3262","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-projektmanagement","category-qualitaet_und_sicherheit","category-test_und_debug","tag-safety","tag-security","tag-sicherheit","tag-sicherheitsanforderungen","tag-sicherheitsstandards","tag-softwarequalitaet","tag-softwaretest","tag-test"],"acf":[],"yoast_head":"\nDen Drachen b\u00e4ndigen - Sichere Software von Anfang an (Teil 1) - MicroConsult Academy GmbH<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.microconsult.de\/en\/ps_secure-software-1\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Den Drachen b\u00e4ndigen - Sichere Software von Anfang an (Teil 1) - MicroConsult Academy GmbH\" \/>\n<meta property=\"og:description\" content=\"Entwickler unter Zeitdruck So wie in alten Mythen Drachen die Menschen plagten und ihr Leben bedrohten, stellen heute technisch unsichere Systeme eine Gefahrenquelle dar. Der entscheidende Unterschied: W\u00e4hrend die Drachen in das Reich der Fabeln geh\u00f6ren, sind technische Systeme als potentielle Gefahrenquellen Teil unseres Alltags.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.microconsult.de\/en\/ps_secure-software-1\/\" \/>\n<meta property=\"og:site_name\" content=\"MicroConsult Academy GmbH\" \/>\n<meta property=\"article:published_time\" content=\"2026-01-29T23:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-02-09T06:21:17+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.microconsult.de\/wp-content\/uploads\/2025\/07\/mc-Drachen-1_510px_br.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"722\" \/>\n\t<meta property=\"og:image:height\" content=\"506\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Ingo Pohle\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ingo Pohle\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.microconsult.de\\\/ps_sichere-software-1\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.microconsult.de\\\/ps_sichere-software-1\\\/\"},\"author\":{\"name\":\"Ingo Pohle\",\"@id\":\"https:\\\/\\\/www.microconsult.de\\\/#\\\/schema\\\/person\\\/f3d82c569a1f1f6cd4678e4fa9d83fe2\"},\"headline\":\"Den Drachen b\u00e4ndigen – Sichere Software von Anfang an (Teil 1)\",\"datePublished\":\"2026-01-29T23:00:00+00:00\",\"dateModified\":\"2026-02-09T06:21:17+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.microconsult.de\\\/ps_sichere-software-1\\\/\"},\"wordCount\":832,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/www.microconsult.de\\\/ps_sichere-software-1\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.microconsult.de\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/mc-Drachen-1_510px_br.jpg\",\"keywords\":[\"Safety\",\"Security\",\"Sicherheit\",\"Sicherheitsanforderungen\",\"Sicherheitsstandards\",\"Softwarequalit\u00e4t\",\"Softwaretest\",\"Test\"],\"articleSection\":[\"Projektmanagement\",\"Qualit\u00e4t und Sicherheit\",\"Test und Debug\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.microconsult.de\\\/ps_sichere-software-1\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.microconsult.de\\\/ps_sichere-software-1\\\/\",\"url\":\"https:\\\/\\\/www.microconsult.de\\\/ps_sichere-software-1\\\/\",\"name\":\"Den Drachen b\u00e4ndigen - Sichere Software von Anfang an (Teil 1) - MicroConsult Academy GmbH\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.microconsult.de\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.microconsult.de\\\/ps_sichere-software-1\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.microconsult.de\\\/ps_sichere-software-1\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.microconsult.de\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/mc-Drachen-1_510px_br.jpg\",\"datePublished\":\"2026-01-29T23:00:00+00:00\",\"dateModified\":\"2026-02-09T06:21:17+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.microconsult.de\\\/#\\\/schema\\\/person\\\/f3d82c569a1f1f6cd4678e4fa9d83fe2\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.microconsult.de\\\/ps_sichere-software-1\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.microconsult.de\\\/ps_sichere-software-1\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/www.microconsult.de\\\/ps_sichere-software-1\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.microconsult.de\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/mc-Drachen-1_510px_br.jpg\",\"contentUrl\":\"https:\\\/\\\/www.microconsult.de\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/mc-Drachen-1_510px_br.jpg\",\"width\":722,\"height\":506},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.microconsult.de\\\/ps_sichere-software-1\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.microconsult.de\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Den Drachen b\u00e4ndigen – Sichere Software von Anfang an (Teil 1)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.microconsult.de\\\/#website\",\"url\":\"https:\\\/\\\/www.microconsult.de\\\/\",\"name\":\"MicroConsult Academy GmbH\",\"description\":\"Professionelle Schulungen, Beratung und Projektunterst\u00fctzung\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.microconsult.de\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.microconsult.de\\\/#\\\/schema\\\/person\\\/f3d82c569a1f1f6cd4678e4fa9d83fe2\",\"name\":\"Ingo Pohle\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4c20895720cf1f04452c6f4dae929e98e13df6f7213521e14cb5c5125febb39d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4c20895720cf1f04452c6f4dae929e98e13df6f7213521e14cb5c5125febb39d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4c20895720cf1f04452c6f4dae929e98e13df6f7213521e14cb5c5125febb39d?s=96&d=mm&r=g\",\"caption\":\"Ingo Pohle\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Taming the Dragon - Secure Software from the Start (Part 1) - MicroConsult Academy GmbH","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.microconsult.de\/en\/ps_secure-software-1\/","og_locale":"en_GB","og_type":"article","og_title":"Den Drachen b\u00e4ndigen - Sichere Software von Anfang an (Teil 1) - MicroConsult Academy GmbH","og_description":"Entwickler unter Zeitdruck So wie in alten Mythen Drachen die Menschen plagten und ihr Leben bedrohten, stellen heute technisch unsichere Systeme eine Gefahrenquelle dar. Der entscheidende Unterschied: W\u00e4hrend die Drachen in das Reich der Fabeln geh\u00f6ren, sind technische Systeme als potentielle Gefahrenquellen Teil unseres Alltags.","og_url":"https:\/\/www.microconsult.de\/en\/ps_secure-software-1\/","og_site_name":"MicroConsult Academy GmbH","article_published_time":"2026-01-29T23:00:00+00:00","article_modified_time":"2026-02-09T06:21:17+00:00","og_image":[{"width":722,"height":506,"url":"https:\/\/www.microconsult.de\/wp-content\/uploads\/2025\/07\/mc-Drachen-1_510px_br.jpg","type":"image\/jpeg"}],"author":"Ingo Pohle","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Ingo Pohle","Estimated reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.microconsult.de\/ps_sichere-software-1\/#article","isPartOf":{"@id":"https:\/\/www.microconsult.de\/ps_sichere-software-1\/"},"author":{"name":"Ingo Pohle","@id":"https:\/\/www.microconsult.de\/#\/schema\/person\/f3d82c569a1f1f6cd4678e4fa9d83fe2"},"headline":"Den Drachen b\u00e4ndigen – Sichere Software von Anfang an (Teil 1)","datePublished":"2026-01-29T23:00:00+00:00","dateModified":"2026-02-09T06:21:17+00:00","mainEntityOfPage":{"@id":"https:\/\/www.microconsult.de\/ps_sichere-software-1\/"},"wordCount":832,"commentCount":0,"image":{"@id":"https:\/\/www.microconsult.de\/ps_sichere-software-1\/#primaryimage"},"thumbnailUrl":"https:\/\/www.microconsult.de\/wp-content\/uploads\/2025\/07\/mc-Drachen-1_510px_br.jpg","keywords":["Safety","Security","Sicherheit","Sicherheitsanforderungen","Sicherheitsstandards","Softwarequalit\u00e4t","Softwaretest","Test"],"articleSection":["Projektmanagement","Qualit\u00e4t und Sicherheit","Test und Debug"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.microconsult.de\/ps_sichere-software-1\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.microconsult.de\/ps_sichere-software-1\/","url":"https:\/\/www.microconsult.de\/ps_sichere-software-1\/","name":"Taming the Dragon - Secure Software from the Start (Part 1) - MicroConsult Academy GmbH","isPartOf":{"@id":"https:\/\/www.microconsult.de\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.microconsult.de\/ps_sichere-software-1\/#primaryimage"},"image":{"@id":"https:\/\/www.microconsult.de\/ps_sichere-software-1\/#primaryimage"},"thumbnailUrl":"https:\/\/www.microconsult.de\/wp-content\/uploads\/2025\/07\/mc-Drachen-1_510px_br.jpg","datePublished":"2026-01-29T23:00:00+00:00","dateModified":"2026-02-09T06:21:17+00:00","author":{"@id":"https:\/\/www.microconsult.de\/#\/schema\/person\/f3d82c569a1f1f6cd4678e4fa9d83fe2"},"breadcrumb":{"@id":"https:\/\/www.microconsult.de\/ps_sichere-software-1\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.microconsult.de\/ps_sichere-software-1\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.microconsult.de\/ps_sichere-software-1\/#primaryimage","url":"https:\/\/www.microconsult.de\/wp-content\/uploads\/2025\/07\/mc-Drachen-1_510px_br.jpg","contentUrl":"https:\/\/www.microconsult.de\/wp-content\/uploads\/2025\/07\/mc-Drachen-1_510px_br.jpg","width":722,"height":506},{"@type":"BreadcrumbList","@id":"https:\/\/www.microconsult.de\/ps_sichere-software-1\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.microconsult.de\/"},{"@type":"ListItem","position":2,"name":"Den Drachen b\u00e4ndigen – Sichere Software von Anfang an (Teil 1)"}]},{"@type":"WebSite","@id":"https:\/\/www.microconsult.de\/#website","url":"https:\/\/www.microconsult.de\/","name":"MicroConsult Academy GmbH","description":"Professional training, consulting and project support","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.microconsult.de\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Person","@id":"https:\/\/www.microconsult.de\/#\/schema\/person\/f3d82c569a1f1f6cd4678e4fa9d83fe2","name":"Ingo Pohle","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/secure.gravatar.com\/avatar\/4c20895720cf1f04452c6f4dae929e98e13df6f7213521e14cb5c5125febb39d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/4c20895720cf1f04452c6f4dae929e98e13df6f7213521e14cb5c5125febb39d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4c20895720cf1f04452c6f4dae929e98e13df6f7213521e14cb5c5125febb39d?s=96&d=mm&r=g","caption":"Ingo Pohle"}}]}},"post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/www.microconsult.de\/en\/wp-json\/wp\/v2\/posts\/3262","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.microconsult.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.microconsult.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.microconsult.de\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.microconsult.de\/en\/wp-json\/wp\/v2\/comments?post=3262"}],"version-history":[{"count":3,"href":"https:\/\/www.microconsult.de\/en\/wp-json\/wp\/v2\/posts\/3262\/revisions"}],"predecessor-version":[{"id":11498,"href":"https:\/\/www.microconsult.de\/en\/wp-json\/wp\/v2\/posts\/3262\/revisions\/11498"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.microconsult.de\/en\/wp-json\/wp\/v2\/media\/3263"}],"wp:attachment":[{"href":"https:\/\/www.microconsult.de\/en\/wp-json\/wp\/v2\/media?parent=3262"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.microconsult.de\/en\/wp-json\/wp\/v2\/categories?post=3262"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.microconsult.de\/en\/wp-json\/wp\/v2\/tags?post=3262"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}