| 2016 | ICSE | Energy profiles of Java collections classes. | Samir Hasan, Zachary King, Munawar Hafiz, Mohammed Sayagh, Bram Adams, Abram Hindle |
| 2016 | ICSE | Understanding and fixing multiple language interoperability issues: the C/Fortran case. | Nawrin Sultana, Justin Middleton, Jeffrey Overbey, Munawar Hafiz |
| 2014 | COMPSAC | JavaScript: The Used Parts. | Sharath Chowdary Gude, Munawar Hafiz, Allen Wirfs-Brock |
| 2014 | DSN | Automatically Fixing C Buffer Overflows Using Program Transformations. | Alex Shaw, Dusten Doggett, Munawar Hafiz |
| 2014 | ESEM | Discovering buffer overflow vulnerabilities in the wild: an empirical study. | Ming Fang, Munawar Hafiz |
| 2013 | ECOOP | Systematic Testing of Refactoring Engines on Real Software Projects. | Milos Gligoric, Farnaz Behrang, Yilong Li, Jeffrey Overbey, Munawar Hafiz, Darko Marinov |
| 2013 | ICSE | Program transformations to fix C integers. | Zack Coker, Munawar Hafiz |
| 2013 | ICST | R2Fix: Automatically Generating Bug Fixes from Bug Reports. | Chen Liu, Jinqiu Yang, Lin Tan, Munawar Hafiz |
| 2013 | OOPSLA | OpenRefactory/C: an infrastructure for building correct and complex C transformations. | Munawar Hafiz, Jeffrey Overbey, Farnaz Behrang, Jillian Hall |
| 2012 | OOPSLA | The nature of order: from security patterns to a pattern language. | Munawar Hafiz, Paul Adamczyk |
| 2012 | OOPSLA | Growing a pattern language (for security). | Munawar Hafiz, Paul Adamczyk, Ralph E. Johnson |
| 2012 | OOPSLA | OpenRefactory/C: an infrastructure for developing program transformations for C programs. | Munawar Hafiz, Jeffrey Overbey |
| 2011 | OOPSLA | An 'explicit type enforcement' program transformation tool for preventing integer vulnerabiliites. | Munawar Hafiz |
| 2010 | OOPSLA | The Tower of Babel did not fail. | Paul Adamczyk, Munawar Hafiz |
| 2009 | ICSE | Improving perimeter security with security-oriented program transformations. | Munawar Hafiz, Ralph E. Johnson |
| 2008 | OOPSLA | Security oriented program transformations (or how to add security on demand). | Munawar Hafiz |
| 2008 | OOPSLA | A security oriented program transformation to "add on" policies to prevent injection attacks. | Munawar Hafiz, Ralph Johnson |
| 2006 | IPCCC | Multiple design patterns for voice over IP (VoIP) security. | Zahid Anwar, William Yurcik, Ralph E. Johnson, Munawar Hafiz, Roy H. Campbell |
| 2005 | OOPSLA | Security patterns and evolution of MTA architecture. | Munawar Hafiz |