An XML-based approach to combine firewalls and web services security specifications