Security patterns and evolution of MTA architecture. - Munawar Hafiz (OOPSLA Companion, 2005)

AMPol: Adaptive Messaging Policy. - Raja Afandi; Jianqing Zhang; Munawar Hafiz; Carl A. Gunter (ECOWS, 2006)

Multiple design patterns for voice over IP (VoIP) security. - Zahid Anwar; William Yurcik; Ralph E. Johnson; Munawar Hafiz; Roy H. Campbell (IPCCC, 2006)

Organizing Security Patterns. - Munawar Hafiz; Paul Adamczyk; Ralph E. Johnson (IEEE Softw., 2007)

Security oriented program transformations (or how to add security on demand). - Munawar Hafiz (OOPSLA Companion, 2008)

A security oriented program transformation to "add on" policies to prevent injection attacks. - Munawar Hafiz; Ralph Johnson (WRT@OOPSLA, 2008)

Evolution of the MTA architecture: the impact of security. - Munawar Hafiz; Ralph E. Johnson (Softw. Pract. Exp., 2008)

Security-oriented program transformations. - Munawar Hafiz; Ralph E. Johnson (CSIIRW, 2009)

Systematically Eradicating Data Injection Attacks Using Security-Oriented Program Transformations. - Munawar Hafiz; Paul Adamczyk; Ralph E. Johnson (ESSoS, 2009)

Improving perimeter security with security-oriented program transformations. - Munawar Hafiz; Ralph E. Johnson (SESS@ICSE, 2009)

The Tower of Babel did not fail. - Paul Adamczyk; Munawar Hafiz (OOPSLA, 2010)

Security on demand - Munawar Hafiz (2010)

REST and Web Services: In Theory and in Practice. - Paul Adamczyk; Patrick H. Smith; Ralph E. Johnson; Munawar Hafiz (REST: From Research to Practice, 2011)

An 'explicit type enforcement' program transformation tool for preventing integer vulnerabiliites. - Munawar Hafiz (OOPSLA Companion, 2011)

Patterns Transform Architectures. - Munawar Hafiz; Paul Adamczyk; Ralph E. Johnson (WICSA, 2011)

The nature of order: from security patterns to a pattern language. - Munawar Hafiz; Paul Adamczyk (SPLASH, 2012)

Growing a pattern language (for security). - Munawar Hafiz; Paul Adamczyk; Ralph E. Johnson (Onward!, 2012)

OpenRefactory/C: an infrastructure for developing program transformations for C programs. - Munawar Hafiz; Jeffrey Overbey (SPLASH, 2012)

Systematic Testing of Refactoring Engines on Real Software Projects. - Milos Gligoric 001; Farnaz Behrang; Yilong Li; Jeffrey Overbey; Munawar Hafiz; Darko Marinov (ECOOP, 2013)

Program transformations to fix C integers. - Zack Coker; Munawar Hafiz (ICSE, 2013)

R2Fix: Automatically Generating Bug Fixes from Bug Reports. - Chen Liu; Jinqiu Yang 001; Lin Tan 001; Munawar Hafiz (ICST, 2013)

OpenRefactory/C: an infrastructure for building correct and complex C transformations. - Munawar Hafiz; Jeffrey Overbey; Farnaz Behrang; Jillian Hall (WRT@SPLASH, 2013)

A pattern language for developing privacy enhancing technologies. - Munawar Hafiz (Softw. Pract. Exp., 2013)

JavaScript: The Used Parts. - Sharath Chowdary Gude; Munawar Hafiz; Allen Wirfs-Brock (COMPSAC, 2014)

Automatically Fixing C Buffer Overflows Using Program Transformations. - Alex Shaw; Dusten Doggett; Munawar Hafiz (DSN, 2014)

Discovering buffer overflow vulnerabilities in the wild: an empirical study. - Ming Fang; Munawar Hafiz (ESEM, 2014)

When Are OSS Developers More Likely to Introduce Vulnerable Code Changes? A Case Study. - Amiangshu Bosu; Jeffrey C. Carver; Munawar Hafiz; Patrick Hilley; Derek Janni (OSS, 2014)

Identifying the characteristics of vulnerable code changes: an empirical study. - Amiangshu Bosu; Jeffrey C. Carver; Munawar Hafiz; Patrick Hilley; Derek Janni (SIGSOFT FSE, 2014)

A foundation for refactoring C with macros. - Jeffrey L. Overbey; Farnaz Behrang; Munawar Hafiz (SIGSOFT FSE, 2014)

Refactoring Myths. - Munawar Hafiz; Jeffrey Overbey (IEEE Softw., 2015)

POODLEs, More POODLEs, FREAK Attacks Too: How Server Administrators Responded to Three Serious Web Vulnerabilities. - Benjamin Fogel; Shane Farmer; Hamza Alkofahi; Anthony Skjellum; Munawar Hafiz (ESSoS, 2016)

Energy profiles of Java collections classes. - Samir Hasan; Zachary King; Munawar Hafiz; Mohammed Sayagh; Bram Adams; Abram Hindle (ICSE, 2016)

Understanding and fixing multiple language interoperability issues: the C/Fortran case. - Nawrin Sultana; Justin Middleton; Jeffrey Overbey; Munawar Hafiz (ICSE, 2016)

Differential precondition checking: a language-independent, reusable analysis for refactoring engines. - Jeffrey L. Overbey; Ralph E. Johnson; Munawar Hafiz (Autom. Softw. Eng., 2016)

Game of detections: how are security vulnerabilities discovered in the wild? - Munawar Hafiz; Ming Fang (Empir. Softw. Eng., 2016)

Growing a language: An empirical study on how (and why) developers use some recently-introduced and/or recently-evolving JavaScript features. - Munawar Hafiz; Samir Hasan; Zachary King; Allen Wirfs-Brock (J. Syst. Softw., 2016)