4. Discussion
Even with good asset protection things can go wrong. Not so long ago at Florida International University (FIU) in their new research and teaching laboratories on cybersecurity, including the Advanced Wireless and Security Lab (ADWISE) and the Cyber-Physical Systems Security Lab (CSL), something unexpected went wrong. For his class project, Andrew De La Rosa–—a student in an ethical hacking class–—decided to attack Bluetooth, a technology standard used to exchange data over short distances. He wanted to show that weaknesses in Bluetooth could allow him to download someone’s private contacts. He picked a device at random on the FIU campus and hacked into it. ‘‘When I ran the serial number, I saw it was registered to campus police,’’ De La Rosa said. He rushed to the police substation at the FIU Engineering Center to explain. ‘‘You’re lucky you told me,’’ the officer told him. ‘‘Even if you’re doing this for a class, I could have arrested you.’’ Florida punishes unauthorized access to a computer system as a felony (Gretch, 2015).