A framework for protecting Web services with IPsec

This work proposes a WSDL security extension for describing IPsec policies in Web services negotiations. The proposed extension is based on the policy model proposed by IETF for describing IPsec policies. Besides the model, the paper presents a framework for embedding IPsec negotiations in Web services applications. The paper also presents the results of the overhead evaluation introduced by the use IPsec to protect Web services applications under different configurations.