1. A security system for controlling the access of a user to an asset, comprising a password-protected access interface and asset access means, the access interface comprising means for receiving user credentials comprising a password, wherein the access interface accepts user credentials in which the password is one of a recognized primary password and one or more recognized secondary passwords, the asset access means being operably associated with the access interface such that when the accepted user credentials comprise the primary password, the asset access means provides access to the asset, and when the accepted user credentials comprise one of the one or more secondary passwords, the asset access means provides relatively limited or feigned access to the asset, and when the user credentials do not comprise one of the primary password and the one or more secondary passwords, the asset access means denies access to the asset, further comprising a server for controlling the access interface, and user-defined security rules stored in memory accessible by the server, the access interface further comprising means for a reverse challenge and response system to allow the user to verify the trustworthiness of the security system prior to accessing the system with the primary or secondary password, wherein the reverse challenge and response system provides the user with a customized confirmation clue according to the user-defined security rules in response to deliberately entering an incorrect password.