Ask GitLab Security: Roger Ostrander
Jun 14, 2019Heather Simpson

Summary
This post introduces Roger Ostrander, a Senior Security Engineer in Abuse Operations, and details his work in developing automated tools to detect and prevent various forms of abuse on GitLab, including snippet spam and malware distribution through group names. It highlights the ongoing 'arms race' nature of abuse prevention and the challenges of maintaining transparency while protecting anti-abuse tactics. The post also mentions an API change that aids in dealing with snippet spam.
More from the Security Control Framework trail
- Track organization-wide security risk in one dashboard
- Dependency Firewall: Block risky packages before the build
- Two front doors: Module-level access in a Django GRC app
- How GitLab tracks vulnerabilities through refactors and reformatting
- Shai-Hulud copycat campaign targets Python developers through PyPI typosquatting