Computer Emergency Response Team (CERT) at WWU Münster

WWU-CERT is responsible for handling security relevant occurrences associated with the usage of PCs and accounts of the WWU Münster.

This task includes the following points:

  • Fast and efficient help as reaction on occurring events (e.g. hacking-attacks, critical security holes, viruses and worms, etc.).
  • Blocking of PCs or accounts during severe incidences.
  • Conditioning of information and performing of investigations if it serves prevention or for inspecting hints if it is necessary.
  • Verification and reaction on copyright infringements.
  • Treatment of judicial and police requests.
  • Running of Intrusion Detection and Intrusion Prevention Systems (IDS/IPS).
  • Cooperation with DFN-CERT and with all those who are responsible for security at the WWU.
  • Cooperation in the conception of security relevant regularisations.

Members of WWU-CERT are currently:


Please report any incident via email to cert@uni-muenster.de. Attach all relevant information, such as log files or email headers. This guarantees a quick and efficient response.

Inquiries per phone can only be answered to legitimate persons within the University of Münster. Please contact the responsible CERT colleague or the ZIVline (Tel. 31600). When inquiring via Email please use you university's email address and mention, if available, the WWU-CERT case number.

Course of action

When the WWU-CERT gets a hint about an incident at an employee workstation, the technician in charge calls the responsible person to accomplish the further steps and the possible shutdown of the PC. If the responsible person is not available the PC will be disconnected from the network and the responsible person and IVV recieve an email which contains information about the incident and the  actions which have to take place.

If the incident takes place in the dial-in scope (VPN, Teleport, WLAN, etc.) the existing connection will be disconnected and the re-dial-in will be prohibited. In this case an email containing information about the occurrence and the   actions which have to take place for getting the account working again is also sent to the causing user.

General hints

The WWU-CERT offers further information about these topics:


The WWU-CERT cooperates closely with the   DFN-CERT of the German National Research and Education Network (NREN)   Deutsches Forschungsnetz (DFN). The DFN-CERT coordinates the exchange of complaints and information about compromising systems of other DFN facilities.

Last edited: 25.03.2014

Imprint | © 2013
Zentrum für Informationsverarbeitung (ZIV)
Röntgenstraße 7-13
· 48149 Münster
Tel.: +49 251 83-31600 · Fax: +49 251 83-31555
E-Mail: ziv@uni-muenster.de