| 2018 | ISSTA | Buffer overflow detection for C programs is hard to learn. | Yang Zhao, Xingzhong Du, Paddy Krishnan, Cristina Cifuentes |
| 2015 | PLDI | Understanding caller-sensitive method vulnerabilities: a class of access control vulnerabilities in the Java platform. | Cristina Cifuentes, Andrew Gross, Nathan Keynes |
| 2015 | SIGMOD | Frapp: Querying the Linux Kernel Dependency Graph. | Nathan Hawes, Ben Barham, Cristina Cifuentes |
| 2014 | APLAS | A Method for Scalable and Precise Bug Finding Using Program Analysis and Model Checking. | Manuel Valdiviezo, Cristina Cifuentes, Padmanabhan Krishnan |
| 2013 | APLAS | Internal Deployment of the Parfait Static Code Analysis Tool at Oracle - (Invited Talk). | Cristina Cifuentes, Nathan Keynes |
| 2013 | ICFEM | Path-Sensitive Data Flow Analysis Simplified. | Kirsten Winter, Chenyi Zhang, Ian J. Hayes, Nathan Keynes, Cristina Cifuentes, Lian Li |
| 2009 | PEPM | Program analysis for bug detection using parfait: invited talk. | Cristina Cifuentes, Nathan Keynes, Lian Li, Bernhard Scholz |
| 2008 | SCAM | Parfait - A Scalable Bug Checker for C Code. | Cristina Cifuentes |
| 2008 | SCAM | User-Input Dependence Analysis via Graph Reachability. | Bernhard Scholz, Chenyi Zhang, Cristina Cifuentes |
| 2006 | VEE | Java | Doug Simon, Cristina Cifuentes, Dave Cleal, John Daniels, Derek White |
| 2005 | OOPSLA | The squawk virtual machine: Java on the bare metal. | Doug Simon, Cristina Cifuentes |
| 1997 | ICSE | Copyright in Shareware Software Distributed on the Internet - The Trumpet Winsock Case. | Cristina Cifuentes, Anne Fitzgerald |
| 1996 | CC | Structuring Decompiled Graphs. | Cristina Cifuentes |
| 1995 | APSEC | An Environment for the Reverse Engineering of Executable Programs. | Cristina Cifuentes |