1. A computer-implemented method for protecting confidential information based upon user security awareness, the method comprising: in response to a user accessing a network-connected site, determining, by a microprocessor, a measure of security awareness of the user, wherein the security awareness comprises the user's knowledge about aspects pertaining to network security; and granting or denying the user access to at least one feature of the site based upon the measure of security awareness, wherein the user demonstrates a reduced security awareness by responding adversely to a simulated security attack.