You should link your code with /dynamicbase, run a full test run, and ship with this option enabled
You should link your applications with the /NXCOMPAT switch