This paper proposes a WSDL security extension for describing IPsec policies in Web Services negotiations. The proposed extension is based on the policy model proposed by IETF for describing IPsec policies. Besides the model, the paper presents a framework for embedding IPsec negotiations in Web Services applications. The paper also presents the results of the overhead evaluation introduced by the use IPsec to protect Web Services applications under different configurations.
Citation:
C?ssio Ditzel Kropiwiec, Edgard Jamhour, Carlos Maziero, "A Framework for Protecting Web Sevices with IPsec," euromicro, pp.290-297, 30th EUROMICRO Conference (EUROMICRO'04), 2004