Discussion of threat modeling, how it can improve the SDLC, and how it can be approached. Threat modeling can be a useful tool for developing secure software that is defensively programmed, but it is not well understood. We will take a look at what it is and some of the output that can be expected from threat modeling.