A Model and Framework for Online Security Benchmarking . INF 31 (2).