1. A software operation modeling device comprising: a function call order obtaining unit configured to obtain or estimate an issuing order of function calls executed in each of specific events in the course of executing software; and a model generator configured to statistically grasp a co-occurrence relationship between the specific event and the issuing order of the function calls obtained or estimated by the function call order obtaining unit, and to record the grasped co-occurrence relationship as an operation model of the software.