Deriving Models of Software Fault-proneness