Searching for a Needle in a Haystack: Predicting Security Vulnerabilities for Windows Vista