How can we provide Security without using SSL/ HTTPS for web services in tibco bw ?

We can use the Security Policy and Security Policy Association of Policy Palette. 

The Security Policy shared configuration resource specifies a security policy that can be used for inbound or outbound SOAP messages.