To be and not to be at the same time: Hidden watchdog timers

Watchdog timers are often used to trigger recovery of failed processes. But to this end the watchdog itself must be fail-safe. This work maximizes watchdog timer availability by a smart technology combination: replicated watchdogs, only one active at a time; hidden watchdogs, inside carrier processes. This approach was validated by implementation and testing within a security system.