SAE/TP 2011-01-2777 (PDF) From a DO-178B Certified Separation Kernel to Common Criteria Security Certification