It's been more than a decade since Microsoft brought Threat Modeling to the attention of the broader development and information security audiences. DREAD and STRIDE, combined with interesting side projects like the Elevation of Privileges card game and other assets provided to the community for free remain unused by many. This presentation will not regurgitate what we already know about threat modeling (there's books for that). It will rather provide insight in how security professionals can use and apply threat modeling to effectively build better security. Practical examples will include decomposing a complex software project to reveal vulnerabilities that would otherwise remain unknown, using threat modeling to educate and support developers, applying threat modeling in a penetration testing methodology to enable more efficient scoping. This presentation reveals the often ignored value of threat modeling and enables the audience to apply it in both offensive and defensive security processes. As a Managing Consultant at IOActive, Wim Remes leverages his 15 years of security leadership experience to advise clients on reducing their risk posture by solving complex security problems and by building resiliency into their organization. Wim delivers expert guidance on reducing the high cost of IT security failures, both financially and in terms of brand reputation with his deep expertise in network security, identity management, policy design, risk assessment and penetration testing. Before joining the IOActive team Wim was a Manager of Information Security for Ernst and Young and a Security Consultant for Bull, where he gained valuable experience building security programs for enterprise class clients. Wim has been engaged in various infosec community initiatives such as the co-development of the Penetration Testing Execution Standard (PTES), InfosecMentors, The Eurotrash Security Podcast and organizing the BruCON security conference. Wim has been a featured speaker at international conferences such as Excaliburcon (China), Blackhat Europe, Source Boston, Source Barcelona and SecZone (Colombia). He is also a Member of the Board of Directors at (ISC)2.