A model and framework for online security benchmarking