I-Freeze Endpoint Security Client

I-Freeze Endpoint Security Client is a Windows desktop security platform designed to protect enterprise endpoint devices and enforce centralized security policies.

The application acts as a device security agent that communicates with a cloud-based management platform to enforce organization security policies and perform real-time threat monitoring.

The system is built using WPF and .NET, and includes a background Windows Worker Service responsible for continuous device monitoring and policy enforcement.

This architecture provides deep integration with the Windows operating system to control hardware, applications, and network access.

---

Key Features

Device Security

• USB device control
• Removable device blocking
• Device isolation
• LAN control
• Network scanning

Endpoint Protection

• AI-based antivirus scanning
• Real-time threat monitoring
• Vulnerability scanning
• Proactive malware detection

System Control

• Disable camera
• Disable microphone
• Block PowerShell
• Kiosk mode support
• Performance monitoring

Application & Web Security

• Application whitelisting
• Application blocking
• Website filtering
• IP whitelist / blacklist

Firewall Management

• Endpoint firewall policy control
• Network traffic filtering
• LAN security policies

---

System Architecture

The platform is composed of three main components:

Endpoint Device
│
│  I-Freeze Security Agent
│  ├── WPF Security Client
│  └── Windows Worker Service
│
▼
REST API Gateway
│
▼
Cloud Management Platform
(ASP.NET MVC Dashboard + SQL Server)

The WPF client provides the user interface, while the Worker Service runs in the background as a Windows Service to monitor the system, enforce security policies, and synchronize with the cloud platform.

The endpoint agent periodically synchronizes with the cloud platform to retrieve new security policies and report device telemetry.

---

Technology Stack

Desktop Client

• WPF (.NET)
• C#
• MVVM architecture
• Windows system APIs

Background Service

• .NET Worker Service
• Windows Service integration
• Continuous device monitoring

Backend Integration

• REST API communication
• Policy synchronization
• Secure device reporting

Security Features

• Antivirus scanning engine
• Device policy enforcement
• Firewall management
• Endpoint monitoring

---

Core Modules

Device Control Module

Manages USB devices, removable storage, and hardware access policies.

Threat Detection Engine

Performs AI-assisted antivirus scanning and vulnerability detection.

Network Security Module

Controls firewall rules and monitors network activity.

Policy Synchronization

Synchronizes device security policies with the cloud management system.

System Monitoring

Tracks device health, performance, and security events.

---

Folder Structure

src
│
├── i-Freeze           # WPF Endpoint Security Client
├── IFreezeWorker      # Background Windows Worker Service
└── Infrastructure     # Local data access, models, validations, and technical support

Screenshot

Endpoint Security Dashboard

---

Cloud Management Platform

This client integrates with the I-Freeze Cloud Management Dashboard, a web platform that allows administrators to:

• manage security policies
• monitor devices
• analyze threat reports
• control endpoint security configurations

The cloud platform will be published as a separate repository.

---

Purpose

This repository demonstrates the architecture and implementation of a modern enterprise endpoint security agent used to enforce device security policies and protect corporate environments.

---

Author

Mohamed Soliman
Senior Software Engineer (.NET)