The IT security infrastructure at UL is structured in a complex manner due to the size of the university, the campus areas spread across the city and the areas of responsibility that need to be taken into account. The University Computer Centre implements comprehensive cross-university security measures to prevent security risks such as cyber attacks. For your security at work, the Computer Centre offers you a range of information and services.

enlarge the image: Man holding a pictogram of a padlock
Photo: Colourbox

User certificate and digital signature

As an employee of the University of Leipzig, you can apply for an electronic user certificate. A user certificate is a personal digital identity that has been authenticated by a trustworthy authority. The user certificate can be used to clearly prove who the sender of an e-mail or the author of a text file is. The University Computer Centre offers the service User Certificate for the issuing of a user certificate and the on-site identity check.

User certificates are used, for example, in the signing of e-mails and documents, as well as in e-mail encryption. You can find out how to apply for a user certificate for official use, which usage guidelines apply and how to use the certificate on the help pages for the user certificate service.

You can use the digital signature on the basis of the user certificate. A digital signature replaces your manual signature, for example to privatise emails and PDFs. You can find out how to set up and use the digital signature on the help pages for the digital signature service.

Encrypting files with Cryptomator

To encrypt files, the URZ recommends the tool “Cryptomator”, as it is an open source-based encryption programme.

  • It offers the possibility to store encrypted files in a cloud so that even the cloud is no longer able to read these files.
  • By creating encrypted vaults, it is possible to store your data protected in your drive.

The URZ has prepared a detailed guide for you

Data encryption with Cryptomator

Tips for protecting your PC from viruses

Everyone who works with a computer connected to the university computer network is not only a passive participant and service user, but also influences (knowingly or unknowingly) other computers and the entire network traffic. Poorly configured computers pose a considerable danger both to themselves and to all other participants in the network. The most important protection against computer security problems is to regularly update the security software used and to install updates or patches as soon as possible after they appear.

The operating systems (Windows, Mac OS, Linux) are protected against viruses by using a virus protection programme. The University has a campus licence for the security software Sophos Anti-Virus, which should be used by all members of Leipzig University according to the computer centre. The operating systems (Windows, Mac OS, Linux) are to be protected by regularly installing security updates. Members of the University of Leipzig can obtain their Windows updates via the Microsoft Windows Update Service of the University Computer Centre.

The service provides users with:

  • Sophos Intercept X Extended Detection and Response (XDR)
  • Anti-Ransomeware
  • Deep-Learning-Technology
  • Exploit Prevention

The service offers users:

  • Regular installation of security updates for current Windows operating systems
  • Easy to use via the connector programme "URZ-Windows-Update.exe
  • All discovered security gaps in Microsoft products are closed as quickly as possible and (almost) without user intervention on the PC maintained in this way. Updates and driver updates are included

To restore the original Windows Update settings, please download the following file and run it on the endpoint. After a restart, the Windows updates are then obtained and installed directly from Microsoft.

Remove_URZ_WSUS.EXE *

This service will be adapted and will only be available for terminals managed by the URZ from 1 January 2023.

Warning against spy mails

Time and again, so-called phishing emails are sent by fraudsters with the request to submit passwords. This is allegedly done in the name of the computer centre or other institutions of the URZ or the university.

It should be noted that

  • the data centre generally does not request passwords by email, and
  • the Computing Centre always sends emails in such a way that it is clear which URZ staff member is the sender of the email (i.e. no helpdesk).
  • we send our emails in the correct German language.

If you receive e-mails asking for passwords, etc., you should delete them immediately and not reply to them. If you do accidentally reply to such an e-mail, you must reset you password immediately.

Von: "Uni-Leipzig" <mpltd****@eircom.net>
Gesendet: Donnerstag, 7. Mai 2020 11:32
Betreff: Mailbox überschritten
 
Lieber Nutzer

Ihre Mailbox ist voll und dies hat uns zu Zustellungsproblemen geführt, sodass wir Ihr E-Mail-Konto deaktivieren müssen. Klicken Sie hier, um Ihr Postfachkontingent zu erhöhen und Ihr Konto wieder zu aktivieren.

KLICKEN SIE HIER, UM DIE MAILBOX-GRÖSSE ZU ERHÖHEN

Vielen Dank,
Uni-Leipzig Administrator

Die Adresse des Links zeigte auf eine Uni fremde Website.

Von: "ADMIN@uni-leipzig.de" <rita.m****@rect.uh.cu>
An: undisclosed-recipients:
Betreff: WARNUNG

BEACHTUNG!!!!

Melden Sie sich bei uni-leipzig.de an. Webmail-Datenbank Unten zur Bestätigung und
Authentifizieren Sie die Gültigkeit Ihrer Webmail-Nutzung, um zeitliche Probleme zu vermeiden
Unterbrechung und Verlust von Dateien in Ihrem Webmail-System.

Klicken Sie hier, um zu bestätigen:https://houses12.000webhostapp.com/uni-leipzig.de/ddd.htm


E-MAIL-HILFE-SCHREIBTISCH
WEBMAIl TEAM
mail.uni-leipzig.de/portal/login.php
From: Webmail ES Service

Sent: Monday, November 22, 2010 12:59 PM

To: undisclosed-recipients:

Subject: Webmail-Konto aktualisieren

Sehr geehrter User Webmail, Diese Nachricht wird aus dem Webmail-Service IT-Mitteilungszentrale an alle Teilnehmer / Webmail-Nutzer. Wir sind derzeit Modernisierung unserer Datenbank und E-Mail-Zentrale durch eine ungewöhnliche Aktivitäten in unserem E-Mail-System identifiziert. Wir sind das Löschen aller nicht verwendeten Webmail-Konten. Sie sind verpflichtet, Ihr Webmail-Konto von der Bestätigung Ihrer Webmail identity.This wird Ihr Webmail-Konto von gewesen während dieser Übung geschlossen verhindern zu überprüfen.

Um zu bestätigen, Sie Web-Mail Identität, sind Sie mit den folgenden Daten zu liefern;
Vorname:
Nachname:
Benutzername / ID:
Passwort:
Passwort wiederholen:
E-Mail Adresse:

* Wichtig * Bitte geben Sie alle diese Informationen vollständig und korrekt sonst aus Sicherheitsgründen haben wir Ihr Konto vorübergehend schließen kann.
Wir danken Ihnen für Ihre sofortige Aufmerksamkeit zu dieser Angelegenheit.
Bitte haben Sie Verständnis, dass dies eine Sicherheitsmaßnahme soll helfen, schützen Sie und Ihre Webmail-Konto ist.
Wir entschuldigen uns für etwaige Unannehmlichkeiten entschuldigen.

Grüße, Webmail IT Service
Von: Universität Leipzig [mailto:cates(at)att.net]
Gesendet: Freitag, 30. Juli 2010 17:13
An: undisclosed recipients:
Betreff: Sehr geehrter Internet-User Universität Leipzig

Sehr geehrter Internet-User Universität Leipzig,

Um Ihren Account Verification-Prozess, sind Sie auf diese Nachricht und geben Sie Ihre ID und das Passwort in das dafür vorgesehene Feld (**********), Sie verpflichtet sind, diese vor der nächsten 48 Stunden nach Erhalt dieses zu tun E-Mail, oder Ihr Webmail-Konto wird de-aktiviert und aus unserer Datenbank gelöscht.

Vollständiger Name:
Webmail Benutzer-ID:
Webmail-Passwort:

Ihr Konto kann auch überprüft werden;
mail.uni-leipzig.de/portal/imp/login.php
Vielen Dank für Ihr www.uni-leipzig.de Support Copyright 2008 Die Universität Leipzig Internet Support.