1. A method for dynamically determining an execution environment in a system having a plurality of execution environments including a first execution environment and a second execution environment, the second execution environment being a protected execution environment, the method comprising: performing behavioral analysis on an executable application prior to execution; determining an initial execution environment based on the behavioral analysis; if the determination indicates protected execution for the initial execution environment, loading the executable application for execution within the second execution environment; if the determination indicates other than protected execution for the initial execution environment, loading the executable application for execution within the first execution environment; collecting behavioral characteristics of the executable application as it is executed within the initial execution environment; and determining from the collected behavioral characteristics whether execution of the executable application should be moved from the initial execution environment to a secondary execution environment while the executable application is still executing in the initial execution environment, wherein only one of the initial execution environment and the secondary execution environment is a protected execution environment.