Identification of web security threats to online business models