Textual analysis of security bug reports