<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Archiving and Interchange DTD v1.0 20120330//EN" "JATS-archivearticle1.dtd">
<article xmlns:xlink="http://www.w3.org/1999/xlink">
  <front>
    <journal-meta />
    <article-meta>
      <title-group>
        <article-title>Computing Personalised Treatments through In Silico Clinical Trials.</article-title>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <string-name>T. Mancini</string-name>
          <xref ref-type="aff" rid="aff1">1</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>F. Mari</string-name>
          <xref ref-type="aff" rid="aff1">1</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>A. Massini</string-name>
          <xref ref-type="aff" rid="aff1">1</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>I. Melatti</string-name>
          <xref ref-type="aff" rid="aff1">1</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>I. Salvo</string-name>
          <xref ref-type="aff" rid="aff1">1</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>S. Sinisi</string-name>
          <xref ref-type="aff" rid="aff1">1</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>E. Tronci</string-name>
          <xref ref-type="aff" rid="aff1">1</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>R. Ehrig</string-name>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>S. Röblitz</string-name>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>B. Leeners</string-name>
          <xref ref-type="aff" rid="aff2">2</xref>
        </contrib>
        <aff id="aff0">
          <label>0</label>
          <institution>Computational Systems Biology Group, Zuse Institute Berlin</institution>
        </aff>
        <aff id="aff1">
          <label>1</label>
          <institution>Computer Science Department, Sapienza University of Rome</institution>
        </aff>
        <aff id="aff2">
          <label>2</label>
          <institution>Division of Reproductive Endocrinology, University Hospital Zurich</institution>
        </aff>
      </contrib-group>
      <abstract>
        <p>In-Silico Clinical Trials (ISCT), i.e., clinical experimental campaigns carried out by means of computer simulations, hold the promise to decrease time and cost for the safety and efficacy assessment of pharmacological treatments, reduce the need for animal and human testing, and enable precision medicine. In this paper we present a case study aiming at quantifying, by means of a multi-arm ISCT supervised by intelligent search, the potential impact of precision medicine approaches on a real pharmacological treatment, namely the downregulation phase of a complex clinical protocol for assisted reproduction.</p>
      </abstract>
    </article-meta>
  </front>
  <body>
    <sec id="sec-1">
      <title>-</title>
      <p>Model-based approaches to safety and efficacy assessment of pharmacological
treatments (In-Silico Clinical Trials, ISCT) hold the promise to decrease time
and cost for the needed experimentations, reduce the need for animal and human
testing, and enable precision medicine, where personalised treatments optimised
for each patient can be designed before being actually administered. This is to
be achieved by developing computational models for human physiology,
pathophysiology, PharmacoKinetics (PK) and PharmacoDynamics (PD), which also
define the possible physiological differences between different individuals (i.e.,
the possible phenotypes ).</p>
      <p>
        Research in Virtual Physiological Human (VPH) provides mechanistic
quantitative models of the human physiology at levels of scale ranging from body
compartments (see, e.g., [
        <xref ref-type="bibr" rid="ref36 ref8">8,36</xref>
        ]), organs (see, e.g., [
        <xref ref-type="bibr" rid="ref7">7</xref>
        ]) down to cells (see, e.g.,
[
        <xref ref-type="bibr" rid="ref2">2</xref>
        ]) or even molecules (see, e.g., [
        <xref ref-type="bibr" rid="ref37">37</xref>
        ]).
      </p>
      <p>Independently of the level of scale used, most VPH models are defined by
means of complex, highly non-linear differential equations. By means of
numerical integration, such models can be executed within simulators in order to
provide quantitative information about the time evolution of the modelled biological
quantities (e.g., hormone concentrations).</p>
      <p>
        Also, VPH models of different body compartments can be integrated in larger
models, eventually defining whole human models. Important attempts in this
direction are given by HumMod [
        <xref ref-type="bibr" rid="ref17">17</xref>
        ] and the more recent Physiomodel [
        <xref ref-type="bibr" rid="ref33">33</xref>
        ],
a complex whole-body model written in the standard Modelica language and
executable by means of open-source (e.g., OpenModelica, openmodelica.org) as
well as proprietary (e.g., Dymola, dymola.com) simulators.
1.1
      </p>
    </sec>
    <sec id="sec-2">
      <title>Motivations</title>
      <p>Current pharmacological treatments are often designed with the average
patient in mind. A key topic in precision medicine is to develop pharmacological
treatments optimised for any given individual (personalised treatments). Several
optimisation criteria can be defined. A typical criterion is minimisation of the
overall amount of administered drug, which often also reduces the probability of
adverse side-effects and contributes to decreasing the treatment cost.</p>
      <p>With their amenability to define different phenotypes, VPH models of proved
accuracy are a key enabler for precision medicine.
1.2</p>
    </sec>
    <sec id="sec-3">
      <title>Contributions</title>
      <p>
        In this paper we present a case study aiming at quantifying, by means of
extensive computer simulation–based experimental campaigns (In-Silico Clinical
Trials, ISCT) guided by intelligent search, the impact of precision medicine
approaches on a real pharmacological treatment, namely the downregulation phase
of a complex clinical protocol for assisted reproduction in humans. To do this,
we exploit a large VPH model of the Hypothalamic–Pituitary–Gonadal (HPG)
axis [
        <xref ref-type="bibr" rid="ref36">36</xref>
        ] in order to conduct a multi-arm ISCT. This model has been used as
a case study in [
        <xref ref-type="bibr" rid="ref31 ref39">39,31</xref>
        ], where a parallel algorithm based on statistical model
checking techniques and deployed on a High Performance Computing (HPC)
infrastructure has been described, which computes a representative set of Virtual
Phenotypes (VPs) for the VPH model given as input.
      </p>
      <p>
        Here we select, from the population of VPs computed in [
        <xref ref-type="bibr" rid="ref31 ref39">39,31</xref>
        ] for the HPG
axis model [
        <xref ref-type="bibr" rid="ref36">36</xref>
        ], a representative subset of 98 different VPs of our HPG axis
model, and conduct a distinct arm of our ISCT for each of such phenotypes, in
order to compute the lightest (in terms of overall amount of administered drug)
treatment still effective for that phenotype.
      </p>
      <p>Our multi-arm ISCT has been conducted on a large HPC infrastructure using
a backtracking-based search algorithm to seek for the lightest but still effective
treatment for each VP. Our search algorithm drives a (black-box) simulator of
the VPH model at hand to intelligently explore the space of possible time-series
of drug administrations.</p>
      <p>We note that a clinical trial with a so high number of arms is not even
conceivable in the classical in vivo setting (it would require a distinct human
patient for each phenotype and for each possible alternative time-series of drug
administrations). This undoubtedly shows the revolutionary potential of artificial
intelligence for model-based (in silico) precision medicine.
Paper outline. The paper is organised as follows. After describing some
background knowledge on the HPG axis model used in our case study and its
phenotypes in Section 2, we outline our reference downregulation protocol in Section 3.
In Section 4 we state our problem and describe our algorithm to solve it. Section 5
describes and analyses the outcome of our multi-arm ISCT. Finally, Section 6
discusses related work and Section 7 draws conclusions.
2</p>
      <sec id="sec-3-1">
        <title>Preliminaries</title>
        <p>In this section we give the necessary background knowledge.
2.1</p>
      </sec>
    </sec>
    <sec id="sec-4">
      <title>The GynCycle Virtual Physiological Human Model</title>
      <p>
        We focus on the GynCycle Virtual Physiological Human (VPH) model, initially
presented in [
        <xref ref-type="bibr" rid="ref36">36</xref>
        ]. GynCycle is a continuous-time differential-algebraic equation–
based mathematical model of the human female Hypothalamic–Pituitary–Gonadal
(HPG) axis, with a special focus on the interactions and feedback mechanisms
between hormones like GnRH, Follicle-Stimulating Hormone (FSH), Luteinizing
Hormone (LH), Estradiol (E2), Progesterone (P4), Inhibin A (IhA) and Inhibin
B (IhB) during the different stages of the human female menstrual cycle.
      </p>
      <p>The model defines the time evolution of overall 33 biological quantities (mostly
blood concentration of hormones) and the
Pharmacokinetics/Pharmacodynamics (PKPD) of several pharmaceutical drugs used in assisted reproduction (in
particular, GnRH analogues like Triptorelin, or FSH/LH–based drugs) by means
of highly non-linear differential equations.</p>
      <p>As such, GynCycle is a hybrid system whose inputs represent drug
administrations. As it happens with VPH models of practical interest as GynCycle, the
complexity of the differential equations makes their symbolic analysis (by, e.g.,
a model checker for hybrid systems) very challenging. Indeed, the model can
be simulated by means of numerical integration in order to compute the time
evolution of the hormones of interest upon administration of a sequence of doses
of one or more drugs. Thus, GynCycle is used as an executable black-box model.
2.2</p>
    </sec>
    <sec id="sec-5">
      <title>GynCycle Virtual Phenotypes</title>
      <p>VPH models like GynCycle typically take into account inter-subject
variability (i.e., the physiological differences among different individuals) by including
suitable parameters in their equations. Different value assignments to model
parameters yield different model time evolutions and/or different reactions to drug
administrations, thus defining different Virtual Phenotypes (VPs). Intuitively,
each VP represents a class of patients behaving similarly to each other.</p>
      <p>Computing a complete set of VPs for the model at hand is the starting point
to obtain a representative population of virtual patients (hence, ideally showing
all possible phenotypes). In turn, this is the key enabler to perform In-Silico
Clinical Trials (ISCT) to assess, e.g., safety and/or efficacy of a pharmacological
treatment.</p>
      <p>
        Unfortunately, computing the complete set of VPs defined by a complex
VPH model is all but easy from the combinatorial point of view, and may
require weeks of massive simulation on large High Performance Computing (HPC)
infrastructures. In [
        <xref ref-type="bibr" rid="ref31 ref39">39,31</xref>
        ] a statistical model checking–based approach using a
non-uniform sampling process finely tuned against the model has been discussed,
and a representative population of VPs for GynCycle consisting of around 104
individuals has been computed (once and for all ) from a huge search space of
1075 possible candidates.
      </p>
      <p>The availability of such a representative population of VPs is the key enabler
for our ISCT.
3</p>
      <sec id="sec-5-1">
        <title>Downregulation in Assisted Reproduction Treatments</title>
        <p>In this section we define the treatment we used as our case study: the
downregulation phase of an assisted reproduction protocol currently administered at the
Department of Reproductive Endocrinology of University Hospital Zurich.</p>
        <p>At each menstrual cycle of a human female, among the several follicles
initially present in the ovaries, only one, unless in exceptional cases, grows and
reaches maturity. A complex competition among follicles takes place, driven by
a hormone-based feedback loop, in order to inhibit the maturation of multiple
follicles.</p>
        <p>In a so-called “long protocol”, the treatment aims at neutralising (through
drugs) such a feedback loop (downregulation phase), in order to achieve a
controlled and an as-simultaneous-as-possible growth of 5–15 ovarian follicles
(stimulation phase). When the first three follicles reach a size where a mature oocyte
can be expected (about 18 mm in diameter), ovulation is induced, the oocytes
are retrieved, those which are mature are tried to be fertilised in vitro, and
implanted either immediately within the treatment cycle or later after
cryopreservation back into the uterus.</p>
        <p>
          Assisted reproduction treatments are complex and challenging, with low
average success rates (around 30%) even in the top clinics, and with many factors
that, to date, can be hardly kept under full control. Indeed, as hormonal
regulatory systems occur within a complex network of endocrinological, neurological
and psychological factors [
          <xref ref-type="bibr" rid="ref16 ref19">19,16</xref>
          ], they are difficult to capture within clinical
studies, and model-based approaches might be of great aid in taking these many
factors under better control.
        </p>
        <p>Our case study is one of the worldwide classically used downregulation
protocols aiming at suppressing the usual hormonal oscillations of the menstrual
cycle (as in Figure 1) and preparing the patient to the following stimulation. At
the Deptartment of Reproductive Endocrinology of University Hospital Zurich,
this protocol currently consists of a sequence of daily administrations of 0.1 mg
of Triptorelin (a GnRH analogue). For physiological reasons, downregulation is
started within a precise time window of the menstrual cycle, namely between
450
400
350
300
/pgLm220500
150
100
50
0
20
18
16
14
/L12
I10
U
8
6
4
2</p>
        <p>TriptorelinNo
(a) E2</p>
        <p>TriptorelinNo
(c) FSH
day 21 and day 25. The treatment might have different duration in order to
address different patient reactions. In particular, a downregulation treatment is
considered successful (effective) for a patient in case the blood concentrations
of a given set of hormones and other physiological quantities go below certain
thresholds within 9 days from the first drug administration, and stay always
below such thresholds for the following 21 days. As a consequence, a
downregulation treatment might last up to 30 days.
4</p>
      </sec>
      <sec id="sec-5-2">
        <title>Computing Optimal Personalised Fertility Treatments</title>
        <p>In the following, we denote with R, R 0, R+ and N+ the sets of, respectively,
all real, non-negative real, strictly positive real, and strictly positive natural
numbers.
4.1</p>
      </sec>
    </sec>
    <sec id="sec-6">
      <title>Formalising the Virtual Physiological Human (VPH) model</title>
      <p>
        VPH models (as GynCycle) are hybrid systems. In the typical case (as ours) in
which model inputs are drug administrations, VPH models can be abstracted
into Discrete Event Systems (DESs) (see, e.g., [
        <xref ref-type="bibr" rid="ref23 ref27">23,27</xref>
        ]), i.e., continuous-time
input-state-output deterministic causal dynamical systems [
        <xref ref-type="bibr" rid="ref38">38</xref>
        ] whose input
functions are discrete event sequences.
      </p>
      <p>Events for a DES defining a VPH model as GynCycle represent clinical
actions, and take values from a finite alphabet A (in our case, defining all the
possible doses for the treatment drug). We assume that a distinguished element
nop exists in A, representing the “null” event (“no action”).</p>
      <p>A discrete event sequence (defining an input function for our VPH model) is
a function u(t) associating to each (continuous) time instant t 2 R 0 an event
(i.e., a clinical action) in A, and such that u(t) differs from nop only in time
points multiple of a given time quantum 2 R+. Intuitively, in our setting,
a discrete event sequence u(t) defines a series of drug administration actions
(including “no action”) occurring at time points multiple of .</p>
      <p>
        Given an assignment to the VPH model parameters (i.e., a Virtual
Phenotype, VP) and a discrete event sequence u, the associated VPH model trajectory
is a continuous-time function x( ; t) representing the time evolution of the
biological quantities defined by the model when fed with u starting from its initial
state and with its parameters set to . Of course, as the VPH model is causal,
its trajectories up to any time point t 2 R 0 only depend on the restriction of
the input discrete sequence up to time point t [
        <xref ref-type="bibr" rid="ref24">24</xref>
        ].
4.2
      </p>
    </sec>
    <sec id="sec-7">
      <title>Modelling treatment invariants and goals</title>
      <p>
        Treatment invariants and goals define conditions that must be, respectively,
always and eventually satisfied by a successful treatment. Invariants and goals
for the treatment being sought can be modelled as continuous-time monitors
embedded within the VPH (DES) model, along the lines of [
        <xref ref-type="bibr" rid="ref23 ref28">23,28</xref>
        ]. Monitors
observe the state of the system and check whether the properties of interest are
satisfied.
      </p>
      <p>In particular, given a model trajectory x( ; t) under a given input function
u(t), our monitor output is Undet as long as x( ; t) satisfies the invariants (in
other words, the monitor decision is “undetermined” as there is hope to extend
the current treatment into a successful treatment) and goes to and stays at
value Fail as soon as invariants are violated. When a Undet model trajectory
satisfies the goal conditions, the monitor output turns to Success, informing the
caller that the input function u(t) defines a successful treatment (i.e., a effective
treatment which always satisfies invariants).</p>
      <p>
        The use of continuous-time monitors embedded in the VPH model gives us a
flexible way to model both bounded safety and bounded liveness properties (see,
e.g., [
        <xref ref-type="bibr" rid="ref25 ref27">25,27</xref>
        ] for a use of monitors to define safety properties for cyber-physical
systems).
      </p>
      <p>In our setting, the properties of interest are the conditions of successful
downregulation treatments (Section 3). In particular, our invariant requires that the
value of all the biological quantities under observation go and stay beyond their
thresholds from the 9-th day after the first drug administration. Our goal
condition instead requires that values for those quantities stay below their thresholds
for 21 consecutive days.</p>
      <sec id="sec-7-1">
        <title>Undet</title>
        <p>invariants violated</p>
      </sec>
      <sec id="sec-7-2">
        <title>Fail</title>
      </sec>
      <sec id="sec-7-3">
        <title>Success</title>
        <p>goal reached</p>
        <p>As a consequence, our monitor output is Undet in the initial state, and
eventually turns either to Fail or to Success (see Figure 2). Model output turns
to value Fail as soon as, from the 9-th day after the first drug administration,
the value of any of the physiological quantities under observation goes beyond
its threshold. Model output turns instead from value Undet to value Success
as soon as all the thresholds are satisfied for 21 consecutive days.
4.3</p>
      </sec>
    </sec>
    <sec id="sec-8">
      <title>VPH model simulation</title>
      <p>As anticipated in Section 2 the complexity of the (highly non-linear) differential
equations typically occurring in actual VPH models hinders the possibility for
their symbolic analysis. Numerical simulation is often the only means to compute
the time evolution of the model quantities of interests (mainly blood hormone
concentrations in GynCycle) upon a sequence of clinical actions (administration
of one or more drugs with their associated doses). Also, as VPH model equations
are often stiff, simulation can be an expensive process from a computational point
of view.</p>
      <p>
        Our algorithm for optimal personalised treatment computation regards the
input VPH model (GynCycle in our case study) as an executable black-box
model. In order to drive the VPH model simulator, our algorithm assumes that
it accepts a set of basic commands (which are available or can be readily
implemented within most modern simulators [
        <xref ref-type="bibr" rid="ref27">27</xref>
        ]) in order to: (i) set given values
( , the VP at hand) for the model parameters; (ii) prepare the model to be
simulated from its initial state; (iii) inject a clinical action (i.e., administer a
drug dose) and advance the simulation by time (e.g., 1 day); (iv) rollback to a
previous simulation state. A simulation campaign (see, e.g., [
        <xref ref-type="bibr" rid="ref26">26</xref>
        ]) is a sequence
of such simulator commands.
4.4
      </p>
    </sec>
    <sec id="sec-9">
      <title>Computing an optimal personalised treatment</title>
      <p>In this section we describe the search-based algorithm that we used at the core
of our In-Silico Clinical Trial (ISCT).</p>
      <p>Given a VP of our GynCycle VPH model and a set of possible alternative
doses for the drug at hand defining the set A of possible clinical actions (including
action “no action”, i.e., dose = 0), our backtracking-based algorithm performs a
depth-first search in the space of possible treatments (i.e., discrete sequences of
clinical actions in A) lasting at most h = 25 + 9 + 21 = 55 days from day 1 of
the patient menstrual cycle (i.e., the latest cycle day, 25, when the treatment
can start, plus the latest day, 9, within which the safety conditions must be met,
plus the number of consecutive days, 21, in which the safety conditions must be
always satisfied in order to declare success).</p>
      <p>
        The search algorithm is implemented in C and drives a GynCyle model
simulator (implemented within the Limex Solver [
        <xref ref-type="bibr" rid="ref12">12</xref>
        ]) using the commands described
in Section 4.3. As the downregulation treatment forbids to administer multiple
drug doses in a single day, we can fix the time step (time quantum between
clinical actions) to 1 day.
      </p>
      <p>The initial state of the GynCycle model represents a patient of VP on day
1 of her menstrual cycle. Furthermore, as described in Section 4.2, the model
is equipped with a continuous-time monitor which checks at any time whether
the current model trajectory satisfies the treatment safety and goal conditions
or not.</p>
      <p>The algorithm initialises the current treatment to the empty treatment and
advances the simulator to cycle day 21 (the earliest day of the first clinical
action) with no drug administrations. From this point, at each step it extends
the current treatment with a new clinical action a 2 A (possibly nop, i.e., “no
drug”).</p>
      <p>Checking safety and goal conditions and backtracking After having
appended to the current partial treatment a new action a 2 A, the action is injected
into the simulator, the simulator is advanced by time , and the monitor output
at the end of the last simulation step is retrieved, thus evaluating the safety and
goals treatment conditions (as defined in Section 4.2) after one day from the last
clinical action. The simulated (partial) treatment is said safe if the monitor
output is Undet, and unsafe if the monitor output if Fail. Whenever the monitor
output turns from Undet to Success, the current (safe) treatment represents
a successful treatment. As soon as the monitor returns Fail, a backtracking is
performed, with the previous simulator state being restored (together with the
state of the monitor and the monitor output value in the restored state). If no
further actions can be executed in the current node of the search tree, a
backtrack is triggered which restores the simulator (plus monitor) state one level up
in the stack.</p>
      <p>
        Optimality constraint Our algorithm does not stop at the first found
successful treatment. Indeed, along the lines of [
        <xref ref-type="bibr" rid="ref22">22</xref>
        ], it keeps track of the lightest
successful treatment found so far, i.e., the one envisioning the administration of
the minimum overall drug amount Dmin 2 R 0. Initially, Dmin is set to +1.
      </p>
      <p>At each node of the search tree, any action extending the current partial
treatment with an administration of a drug dose which would make the
overall administered drug amount reaching or exceeding Dmin is regarded as not
applicable.
Preference ordering among actions In a black-box setting as ours, no
inference can be made on the effects of each candidate action without performing
a simulator run to actually advance the model and then querying the model
monitor output. Hence, approaches to compute, through inference, a dynamic
preference order among the candidate actions to be tried during search (as those
exploited in, e.g., classical planning, planning for white-box hybrid systems –see
Section 6– or CSP, SAT or local search solvers) cannot be applied.</p>
      <p>The only information available to the algorithm without running the
simulator is value Dmin and the overall cost of the current partial treatment (overall
amount of drug administered). Hence, given that our algorithm searches for a
successful treatment of minimum cost and that any action has a non-negative
contribution to the overall treatment cost, it not surprisingly tries the clinical
actions on each node in the search tree in ascending order of their associated
dose (i.e., cost), hence performing a greedy, optimistic choice.</p>
      <p>The optimality constraint (whose threshold is updated each time a new
optimal treatment is found), the presence of a bounded horizon h and the fact that
our algorithm does not stop at the first successful treatment clearly guarantee
that a global optimum is always returned (if any successful treatment exists).
5</p>
      <sec id="sec-9-1">
        <title>Multi-Arm In-Silico Clinical Trial</title>
        <p>In this section we outline how we set up and conducted our In-Silico Clinical
Trial (ISCT).
5.1</p>
      </sec>
    </sec>
    <sec id="sec-10">
      <title>Selection of Virtual Phenotypes (VPs) and exclusion criteria</title>
      <p>
        The GynCycle model defines around 104 VPs (Section 2.1) whose time behaviour
(under no treatment) is shown in Figure 3 (light curves). In order to carry out
our multi-arm ISCT, we clustered such VPs by merging in the same cluster
phenotypes behaving similarly, where similarity has been defined (along the lines
of [
        <xref ref-type="bibr" rid="ref31 ref39">39,31</xref>
        ]) by means of signal processing metrics. For each obtained cluster, a
single representative has been randomly selected.
      </p>
      <p>Not surprisingly, the reference downregulation treatment of Section 3 does
not succeed on all possible phenotypes. Hence, we excluded from our ISCT those
VPs for which the reference treatment fails. Our exclusion criterion directly
stems from domain knowledge on downregulation treatments (namely: for these
protocols, if the reference treatment, which envisions one full drug dose per day,
fails for a patient, a lighter treatment will fail as well).</p>
      <p>As a result of the application of clustering and of our exclusion criteria, we
obtained a population of 98 VPs representative of the spectrum of all model
VPs for which the reference downregulation treatment works (dark curves in
Figure 3). Any two different VPs in our selection differ significantly for the time
behaviour of at least one of the 33 biological quantities defined by the model
(although they might appear similar on others, e.g., those in Figure 3).</p>
      <p>Each of the 98 VPs in our selected population defines a distinct arm of our
multi-arm ISCT.
(c) FSH
(d) LH
We ran our 98-arm ISCT using a large High Performance Computing (HPC)
infrastructure (the Marconi cluster) kindly provided by the Cineca consortium.</p>
      <p>For each VP in the selected population, we ran our algorithm of Section 4
on an independent node of the cluster searching for an optimal (i.e., lightest)
downregulation treatment for that VP, thus in an embarrassing parallel fashion.
5.3</p>
    </sec>
    <sec id="sec-11">
      <title>Computational results</title>
      <p>Figure 4a shows the distribution of the computation times of each parallel process
implementing a single arm of our multi-arm ISCT.</p>
      <p>In particular, the average completion time of the arms of our ISCT is 19.09 h.
Although standard deviation is very large (21.31 h), from Figure 4a it can be
seen that the vast majority (around 90%) of ISCT arms terminate in less than
48 hours.</p>
      <p>Figure 4b shows the distribution of the number of computation nodes among
our ISCT arms. On average, 918 770 nodes have been expanded by each parallel
search process in order to find an optimal treatment for the VP at hand. Also
here, standard deviation is very large (1 144 123 nodes).</p>
      <p>The high standard deviations of the distributions of computation time and
number of expanded nodes among VPs can be explained by observing that our
algorithm deterministically orders clinical actions to be selected in each search
tree node in ascending order of the administered drug dose (i.e., on their
contribution to the overall cost function). In Section 4.4 we have argued that any
choice of the actions based on inference of the prospective effect of each action is
a not viable option, because of the black-box nature of the Virtual Physiological
Human (VPH) model. That said, the left skew of the distributions in Figures 4a
and 4b suggests that our chosen action preference order does behave very well
in the vast majority of cases.</p>
      <p>Overall, Figures 4a and 4b show the revolutionary potential of ISCT: an
ISCT over a population of 98 VPs has been conducted in a few days of parallel
computation, whilst an equivalent in vivo clinical trial would have been not even
conceivable. In fact, we would need to recruit in the clinical trial a distinct human
patient for each phenotype and for each of the tested treatment variations.
The overall number of human patients to be recruited would have been several
millions, thus clearly making the approach infeasible.</p>
    </sec>
    <sec id="sec-12">
      <title>5.4 ISCT outcomes</title>
      <p>
        Individualised treatments have the potential value to reduce costs and improve
outcomes of standard clinical treatments. In recent years data-driven techniques
have been investigated thanks to the availability of big data [
        <xref ref-type="bibr" rid="ref34">34</xref>
        ]. For example,
the knowledge-base approach in [
        <xref ref-type="bibr" rid="ref13">13</xref>
        ] has been used to optimise treatment plans
&lt; 6 12 18 24 30 36 42 48 54 60 66 72 78 84 90 96
      </p>
      <p>Computation
Cumulative</p>
      <p>Nodes
&lt;
for lung cancer. Unfortunately in presence of scarce experimental data, the above
approaches cannot be applied. For example, in our case study hormones blood
concentrations are not measured every day, since those measurements are costly
and invasive.</p>
      <p>
        Model-based approaches, exploiting PharmacoKinetics (PK), as e.g., [
        <xref ref-type="bibr" rid="ref42">42</xref>
        ], are
used instead to build virtual phenotypes populations. Such populations are used
to optimise and individualise drug doses [
        <xref ref-type="bibr" rid="ref18 ref41">18,41</xref>
        ]. PK-based models, however, do
not define how administered drugs can affect a Virtual Phenotype (VP) (namely,
PharmacoDynamics, PD), i.e., possible side-effects due to drug administrations
are not taken into account.
      </p>
      <p>
        In our model-based setting, we have to face with complex Virtual
Physiological Human (VPH) models, e.g., HumMod [
        <xref ref-type="bibr" rid="ref17">17</xref>
        ], Physiomodel [
        <xref ref-type="bibr" rid="ref33">33</xref>
        ] and
GynCycle [
        <xref ref-type="bibr" rid="ref36">36</xref>
        ] defined through highly non-linear differential equations modelling
underlying biological mechanisms (e.g., inhibitory and stimulatory effects).
      </p>
      <p>
        As outlined in Section 4.1, such VPH models are hybrid systems that can be
abstracted into Discrete Event Systems (DESs) (see, e.g., [
        <xref ref-type="bibr" rid="ref23 ref27">23,27</xref>
        ]) whose inputs
are discrete event sequences. To find an optimal treatment means to find an
optimal plan in hybrid domains, where the behaviour of the given system is described
by both discrete and continuous quantities. In the literature, there are many
techniques and tools to model planning problems in hybrid domains. Examples are:
PDDL+ [
        <xref ref-type="bibr" rid="ref14 ref40">14,40</xref>
        ], Satisfiability Modulo Theories (SMT)-based PDDL+ [
        <xref ref-type="bibr" rid="ref5">5</xref>
        ] and
other PDDL+ extensions [
        <xref ref-type="bibr" rid="ref10 ref11 ref3 ref6">11,10,6,3</xref>
        ]. Model checking techniques are also used
to find plans. Examples in this direction are [
        <xref ref-type="bibr" rid="ref4">4</xref>
        ], which exploits symbolic model
checking, UPMurphi [
        <xref ref-type="bibr" rid="ref11">11</xref>
        ], which given as input a PDDL+ problem specification
computes a universal plan, CGMurphi [
        <xref ref-type="bibr" rid="ref9">9</xref>
        ], an explicit model checker used to
compute optimal controllers, and [
        <xref ref-type="bibr" rid="ref1 ref32">1,32</xref>
        ], which define a methodology to compute
controllers for non-linear systems.
      </p>
      <p>However, as outlined in Section 4.3, the complexity of the differential
equations of VPH models relevant for in silico clinical practice makes such models
out of reach for symbolic approaches like those mentioned above, and appoints
numerical integration as the only viable means to compute (black-box) the model
evolutions under a given input function.</p>
      <p>
        In particular, even considering that clinical actions have constant and equal
duration (as, e.g., in [
        <xref ref-type="bibr" rid="ref20">20</xref>
        ]), no reasoning or inference can be made on action effects
in a black-box setting as ours. The automated synthesis of rational decisions and
plans in black-box environments, where numerical simulation is the only means
to discover the effect of actions, is common in several other application domains
of high industrial relevance, like smart grids (see, e.g., [
        <xref ref-type="bibr" rid="ref15 ref29 ref30">29,30,15</xref>
        ]), games (see,
e.g., [
        <xref ref-type="bibr" rid="ref21">21</xref>
        ]) and real-time manoeuvring of Unmanned Aerial Vehicles (see, e.g.,
[
        <xref ref-type="bibr" rid="ref35">35</xref>
        ]).
7
      </p>
      <sec id="sec-12-1">
        <title>Conclusions</title>
        <p>We presented a case study showing how model-based approaches coupled with
intelligent search techniques can be used to support precision medicine by
computing, for each given patient, a personalised treatment maximising effectiveness
while minimising cost as well as likelihood and severity of adverse effects.</p>
        <p>By exploiting a complex Virtual Physiological Human (VPH) model of the
human female Hypothalamic–Pituitary–Gonadal (HPG) axis, its set of Virtual
Phenotypes (VPs), and a backtracking-search algorithm that intelligently drives
a simulator for the VPH model, we set up and conducted a multi-arm In-Silico
Clinical Trial (ISCT) which computes, for each VP satisfying our inclusion
criteria, a personalised variation of a reference pharmaceutical treatment which,
preserving effectiveness, minimises the overall amount of drug used.</p>
        <p>Our ISCT can be carried out with a few days of parallel computation on a
regular High Performance Computing (HPC) infrastructure, while an equivalent
(classical) in vivo trial would require the recruiting of several millions of human
patients in order to test all treatment variations assessed in silico, thus resulting
just infeasible.</p>
        <p>Although our trial shows extremely favourable results (with computed
personalised treatments using only a tiny fraction of the drug quantity employed by
the reference treatment), there are sill open issues in the area of ISCT. In
particular, mapping each human patient to her corresponding VP calls for novel and
highly inter-disciplinary approaches at the intersection of Artificial Intelligence,
Medicine, Mathematics and Biology.</p>
        <p>Acknowledgements. This work was partially supported by the Italian
Ministry of University and Research (MIUR) under grant “Dipartimenti di eccellenza
2018–2022” of the Department of Computer Science of Sapienza University of
Rome and by the EC FP7 project PAEON (Model Driven Computation of
Treatments for Infertility Related Endocrinological Diseases, 600773).</p>
      </sec>
    </sec>
  </body>
  <back>
    <ref-list>
      <ref id="ref1">
        <mixed-citation>
          1.
          <string-name>
            <given-names>V.</given-names>
            <surname>Alimguzhin</surname>
          </string-name>
          ,
          <string-name>
            <given-names>F.</given-names>
            <surname>Mari</surname>
          </string-name>
          ,
          <string-name>
            <surname>I. Melatti</surname>
          </string-name>
          ,
          <string-name>
            <surname>I. Salvo</surname>
          </string-name>
          , and
          <string-name>
            <given-names>E.</given-names>
            <surname>Tronci</surname>
          </string-name>
          .
          <article-title>Linearizing discrete time hybrid systems</article-title>
          .
          <source>IEEE TAC</source>
          ,
          <volume>62</volume>
          (
          <issue>10</issue>
          ),
          <year>2017</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref2">
        <mixed-citation>
          2.
          <string-name>
            <given-names>M.</given-names>
            <surname>Bächler</surname>
          </string-name>
          ,
          <string-name>
            <given-names>D.</given-names>
            <surname>Menshykau</surname>
          </string-name>
          , Ch. De Geyter, and
          <string-name>
            <given-names>D.</given-names>
            <surname>Iber</surname>
          </string-name>
          .
          <article-title>Species-specific differences in follicular antral sizes result from diffusion-based limitations on the thickness of the granulosa cell layer</article-title>
          .
          <source>Mol. Hum</source>
          . Reprod.,
          <volume>20</volume>
          (
          <issue>3</issue>
          ),
          <year>2014</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref3">
        <mixed-citation>
          3.
          <string-name>
            <given-names>S.</given-names>
            <surname>Bogomolov</surname>
          </string-name>
          ,
          <string-name>
            <given-names>D.</given-names>
            <surname>Magazzeni</surname>
          </string-name>
          ,
          <string-name>
            <given-names>S.</given-names>
            <surname>Minopoli</surname>
          </string-name>
          , and
          <string-name>
            <given-names>M.</given-names>
            <surname>Wehrle</surname>
          </string-name>
          .
          <article-title>PDDL+ planning with hybrid automata: Foundations of translating must behavior</article-title>
          .
          <source>In Proc. ICAPS</source>
          <year>2015</year>
          . AAAI,
          <year>2015</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref4">
        <mixed-citation>
          4.
          <string-name>
            <given-names>S.</given-names>
            <surname>Bogomolov</surname>
          </string-name>
          ,
          <string-name>
            <given-names>D.</given-names>
            <surname>Magazzeni</surname>
          </string-name>
          ,
          <string-name>
            <given-names>A.</given-names>
            <surname>Podelski</surname>
          </string-name>
          , and
          <string-name>
            <given-names>M.</given-names>
            <surname>Wehrle</surname>
          </string-name>
          .
          <article-title>Planning as model checking in hybrid domains</article-title>
          .
          <source>In Proc. AAAI</source>
          <year>2014</year>
          . AAAI,
          <year>2014</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref5">
        <mixed-citation>
          5.
          <string-name>
            <given-names>D.</given-names>
            <surname>Bryce</surname>
          </string-name>
          ,
          <string-name>
            <given-names>S.</given-names>
            <surname>Gao</surname>
          </string-name>
          ,
          <string-name>
            <given-names>D.J.</given-names>
            <surname>Musliner</surname>
          </string-name>
          , and
          <string-name>
            <given-names>R.P.</given-names>
            <surname>Goldman</surname>
          </string-name>
          .
          <article-title>Smt-based nonlinear pddl+ planning</article-title>
          .
          <source>In Proc. AAAI</source>
          <year>2015</year>
          . AAAI,
          <year>2015</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref6">
        <mixed-citation>
          6.
          <string-name>
            <given-names>A.J.</given-names>
            <surname>Coles</surname>
          </string-name>
          and
          <string-name>
            <surname>A.I. Coles.</surname>
          </string-name>
          <article-title>Pddl+ planning with events and linear processes</article-title>
          .
          <source>In Proc. ICAPS</source>
          <year>2014</year>
          ,
          <year>2014</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref7">
        <mixed-citation>
          7.
          <string-name>
            <given-names>L.G.E.</given-names>
            <surname>Cox</surname>
          </string-name>
          ,
          <string-name>
            <given-names>S.</given-names>
            <surname>Loerakker</surname>
          </string-name>
          ,
          <string-name>
            <surname>M.C.M. Rutten</surname>
            ,
            <given-names>B.A.</given-names>
          </string-name>
          <string-name>
            <surname>J.M. De Mol</surname>
            , and
            <given-names>F.N.</given-names>
          </string-name>
          <string-name>
            <surname>Van De Vosse</surname>
          </string-name>
          .
          <article-title>A mathematical model to evaluate control strategies for mechanical circulatory support</article-title>
          .
          <source>Artif. Organs</source>
          ,
          <volume>33</volume>
          (
          <issue>8</issue>
          ),
          <year>2009</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref8">
        <mixed-citation>
          8.
          <string-name>
            <given-names>C.</given-names>
            <surname>Dalla Man</surname>
          </string-name>
          ,
          <string-name>
            <given-names>F.</given-names>
            <surname>Micheletto</surname>
          </string-name>
          ,
          <string-name>
            <given-names>D.</given-names>
            <surname>Lv</surname>
          </string-name>
          ,
          <string-name>
            <given-names>M.</given-names>
            <surname>Breton</surname>
          </string-name>
          ,
          <string-name>
            <given-names>B.</given-names>
            <surname>Kovatchev</surname>
          </string-name>
          , and
          <string-name>
            <given-names>C.</given-names>
            <surname>Cobelli</surname>
          </string-name>
          .
          <article-title>The uva/padova type 1 diabetes simulator: New features</article-title>
          .
          <source>JDST</source>
          ,
          <volume>8</volume>
          ,
          <year>2014</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref9">
        <mixed-citation>
          9.
          <string-name>
            <given-names>G.</given-names>
            <surname>Della Penna</surname>
          </string-name>
          ,
          <string-name>
            <given-names>B.</given-names>
            <surname>Intrigila</surname>
          </string-name>
          ,
          <string-name>
            <given-names>D.</given-names>
            <surname>Magazzeni</surname>
          </string-name>
          ,
          <string-name>
            <surname>I. Melatti</surname>
          </string-name>
          , and
          <string-name>
            <given-names>E.</given-names>
            <surname>Tronci</surname>
          </string-name>
          . Cgmurphi:
          <article-title>Automatic synthesis of numerical controllers for nonlinear hybrid systems</article-title>
          .
          <source>Eur. J. Control</source>
          ,
          <volume>19</volume>
          (
          <issue>1</issue>
          ),
          <year>2013</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref10">
        <mixed-citation>
          10.
          <string-name>
            <given-names>G.</given-names>
            <surname>Della Penna</surname>
          </string-name>
          ,
          <string-name>
            <given-names>B.</given-names>
            <surname>Intrigila</surname>
          </string-name>
          ,
          <string-name>
            <given-names>D.</given-names>
            <surname>Magazzeni</surname>
          </string-name>
          , and
          <string-name>
            <given-names>F.</given-names>
            <surname>Mercorio</surname>
          </string-name>
          .
          <article-title>Planning for autonomous planetary vehicles</article-title>
          .
          <source>In Proc. ICAS</source>
          <year>2010</year>
          . IEEE,
          <year>2010</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref11">
        <mixed-citation>
          11.
          <string-name>
            <given-names>G.</given-names>
            <surname>Della Penna</surname>
          </string-name>
          ,
          <string-name>
            <given-names>D.</given-names>
            <surname>Magazzeni</surname>
          </string-name>
          ,
          <string-name>
            <given-names>F.</given-names>
            <surname>Mercorio</surname>
          </string-name>
          , and
          <string-name>
            <given-names>B.</given-names>
            <surname>Intrigila</surname>
          </string-name>
          .
          <article-title>Upmurphi: A tool for universal planning on pddl+ problems</article-title>
          .
          <source>In Proc. ICAPS</source>
          <year>2009</year>
          . AAAI,
          <year>2009</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref12">
        <mixed-citation>
          12.
          <string-name>
            <given-names>R.</given-names>
            <surname>Ehrig</surname>
          </string-name>
          ,
          <string-name>
            <given-names>U.</given-names>
            <surname>Nowak</surname>
          </string-name>
          ,
          <string-name>
            <given-names>L.</given-names>
            <surname>Oeverdieck</surname>
          </string-name>
          , and
          <string-name>
            <given-names>P.</given-names>
            <surname>Deuflhard</surname>
          </string-name>
          .
          <article-title>Advanced extrapolation methods for large scale differential algebraic problems</article-title>
          . In F.H.-J. Bungartz, editor,
          <source>High Performance Scientific and Engineering Computing</source>
          , volume
          <volume>8</volume>
          <source>of LNCSE</source>
          . Springer,
          <year>1999</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref13">
        <mixed-citation>
          13.
          <string-name>
            <given-names>A.</given-names>
            <surname>Fogliata</surname>
          </string-name>
          ,
          <string-name>
            <given-names>F.</given-names>
            <surname>Belosi</surname>
          </string-name>
          ,
          <string-name>
            <given-names>A.</given-names>
            <surname>Clivio</surname>
          </string-name>
          ,
          <string-name>
            <given-names>P.</given-names>
            <surname>Navarria</surname>
          </string-name>
          , G. Nicolini,
          <string-name>
            <given-names>M.</given-names>
            <surname>Scorsetti</surname>
          </string-name>
          , E. Vanetti, and
          <string-name>
            <given-names>L.</given-names>
            <surname>Cozzi</surname>
          </string-name>
          .
          <article-title>On the pre-clinical validation of a commercial model-based optimisation engine: Application to volumetric modulated arc therapy for patients with lung or prostate cancer</article-title>
          .
          <source>Radiother. Oncol.</source>
          ,
          <volume>113</volume>
          (
          <issue>3</issue>
          ):
          <fpage>385</fpage>
          -
          <lpage>391</lpage>
          ,
          <year>2014</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref14">
        <mixed-citation>
          14.
          <string-name>
            <given-names>M.</given-names>
            <surname>Fox</surname>
          </string-name>
          and
          <string-name>
            <given-names>D.</given-names>
            <surname>Long</surname>
          </string-name>
          .
          <article-title>Modelling mixed discrete-continuous domains for planning</article-title>
          .
          <source>JAIR</source>
          ,
          <volume>27</volume>
          ,
          <year>2006</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref15">
        <mixed-citation>
          15.
          <string-name>
            <given-names>B.P.</given-names>
            <surname>Hayes</surname>
          </string-name>
          , I. Melatti,
          <string-name>
            <given-names>T.</given-names>
            <surname>Mancini</surname>
          </string-name>
          ,
          <string-name>
            <given-names>M.</given-names>
            <surname>Prodanovic</surname>
          </string-name>
          , and
          <string-name>
            <given-names>E.</given-names>
            <surname>Tronci</surname>
          </string-name>
          .
          <article-title>Residential demand management using individualised demand aware price policies</article-title>
          .
          <source>IEEE Trans. Smart Grid</source>
          ,
          <volume>8</volume>
          (
          <issue>3</issue>
          ),
          <year>2017</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref16">
        <mixed-citation>
          16.
          <string-name>
            <surname>M.P. Hengartner</surname>
            ,
            <given-names>T.H.C.</given-names>
          </string-name>
          <string-name>
            <surname>Kruger</surname>
            ,
            <given-names>K.</given-names>
          </string-name>
          <string-name>
            <surname>Geraedts</surname>
            , E. Tronci,
            <given-names>T.</given-names>
          </string-name>
          <string-name>
            <surname>Mancini</surname>
            ,
            <given-names>F.</given-names>
          </string-name>
          <string-name>
            <surname>Ille</surname>
            ,
            <given-names>M.</given-names>
          </string-name>
          <string-name>
            <surname>Egli</surname>
            ,
            <given-names>S.</given-names>
          </string-name>
          <string-name>
            <surname>Roeblitz</surname>
            ,
            <given-names>R.</given-names>
          </string-name>
          <string-name>
            <surname>Ehrig</surname>
            ,
            <given-names>L.</given-names>
          </string-name>
          <string-name>
            <surname>Saleh</surname>
            ,
            <given-names>K.</given-names>
          </string-name>
          <string-name>
            <surname>Spanaus</surname>
            ,
            <given-names>C.</given-names>
          </string-name>
          <string-name>
            <surname>Schippert</surname>
            ,
            <given-names>Y.</given-names>
          </string-name>
          <string-name>
            <surname>Zhang</surname>
            , and
            <given-names>B.</given-names>
          </string-name>
          <string-name>
            <surname>Leeners</surname>
          </string-name>
          .
          <article-title>Negative affect is unrelated to fluctuations in hormone levels across the menstrual cycle: Evidence from a multisite observational study across two successive cycles</article-title>
          .
          <source>J. Psycho. Res.</source>
          ,
          <volume>99</volume>
          ,
          <year>2017</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref17">
        <mixed-citation>
          17.
          <string-name>
            <given-names>R.</given-names>
            <surname>Hester</surname>
          </string-name>
          ,
          <string-name>
            <given-names>A.</given-names>
            <surname>Brown</surname>
          </string-name>
          , L. Husband,
          <string-name>
            <given-names>R.</given-names>
            <surname>Iliescu</surname>
          </string-name>
          ,
          <string-name>
            <given-names>W.A.</given-names>
            <surname>Pruett</surname>
          </string-name>
          ,
          <string-name>
            <given-names>R.L.</given-names>
            <surname>Summers</surname>
          </string-name>
          , and
          <string-name>
            <given-names>T.</given-names>
            <surname>Coleman</surname>
          </string-name>
          .
          <article-title>Hummod: a modeling environment for the simulation of integrative human physiology</article-title>
          .
          <source>Front. Physiol</source>
          ,
          <volume>2</volume>
          ,
          <year>2011</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref18">
        <mixed-citation>
          18.
          <string-name>
            <surname>P.M. Jeena</surname>
            ,
            <given-names>W.R.</given-names>
          </string-name>
          <string-name>
            <surname>Bishai</surname>
            ,
            <given-names>J.G.</given-names>
          </string-name>
          <string-name>
            <surname>Pasipanodya</surname>
            , and
            <given-names>T.</given-names>
          </string-name>
          <string-name>
            <surname>Gumbo</surname>
          </string-name>
          .
          <article-title>In silico children and the glass mouse model: clinical trial simulations to identify and individualize optimal isoniazid doses in children with tuberculosis</article-title>
          .
          <source>Antimicrob</source>
          . Agents Chemother.,
          <volume>55</volume>
          (
          <issue>2</issue>
          ):
          <fpage>539</fpage>
          -
          <lpage>545</lpage>
          ,
          <year>2011</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref19">
        <mixed-citation>
          19.
          <string-name>
            <given-names>B.</given-names>
            <surname>Leeners</surname>
          </string-name>
          ,
          <string-name>
            <given-names>T.H.C.</given-names>
            <surname>Kruger</surname>
          </string-name>
          ,
          <string-name>
            <given-names>K.</given-names>
            <surname>Geraedts</surname>
          </string-name>
          , E. Tronci,
          <string-name>
            <given-names>T.</given-names>
            <surname>Mancini</surname>
          </string-name>
          ,
          <string-name>
            <given-names>F.</given-names>
            <surname>Ille</surname>
          </string-name>
          ,
          <string-name>
            <given-names>M.</given-names>
            <surname>Egli</surname>
          </string-name>
          ,
          <string-name>
            <given-names>S.</given-names>
            <surname>Roeblitz</surname>
          </string-name>
          ,
          <string-name>
            <given-names>L.</given-names>
            <surname>Saleh</surname>
          </string-name>
          ,
          <string-name>
            <given-names>K.</given-names>
            <surname>Spanaus</surname>
          </string-name>
          ,
          <string-name>
            <given-names>C.</given-names>
            <surname>Schippert</surname>
          </string-name>
          ,
          <string-name>
            <given-names>Y.</given-names>
            <surname>Zhang</surname>
          </string-name>
          , and
          <string-name>
            <given-names>M.P.</given-names>
            <surname>Hengartner</surname>
          </string-name>
          .
          <article-title>Lack of associations between female hormone levels and visuospatial working memory, divided attention and cognitive bias across two consecutive menstrual cycles</article-title>
          .
          <source>Front. Behav</source>
          . Neuro.,
          <volume>11</volume>
          ,
          <year>2017</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref20">
        <mixed-citation>
          20.
          <string-name>
            <given-names>H.X.</given-names>
            <surname>Li</surname>
          </string-name>
          and
          <string-name>
            <given-names>B.C.</given-names>
            <surname>Williams</surname>
          </string-name>
          .
          <article-title>Generative planning for hybrid systems based on flow tubes</article-title>
          .
          <source>In Proc. ICAPS</source>
          <year>2008</year>
          . AAAI,
          <year>2008</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref21">
        <mixed-citation>
          21.
          <string-name>
            <given-names>N.</given-names>
            <surname>Lipovetzky</surname>
          </string-name>
          ,
          <string-name>
            <given-names>M.</given-names>
            <surname>Ramirez</surname>
          </string-name>
          , and
          <string-name>
            <given-names>H.</given-names>
            <surname>Geffner</surname>
          </string-name>
          .
          <article-title>Classical planning with simulators: Results on the atari video games</article-title>
          .
          <source>In Proc. IJCAI</source>
          <year>2015</year>
          , volume
          <volume>15</volume>
          , pages
          <fpage>1610</fpage>
          -
          <lpage>1616</lpage>
          ,
          <year>2015</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref22">
        <mixed-citation>
          22. T. Mancini,
          <string-name>
            <given-names>P.</given-names>
            <surname>Flener</surname>
          </string-name>
          , and
          <string-name>
            <given-names>J.</given-names>
            <surname>Pearson</surname>
          </string-name>
          .
          <article-title>Combinatorial problem solving over relational databases: View synthesis through constraint-based local search</article-title>
          .
          <source>In Proc. SAC</source>
          <year>2012</year>
          . ACM,
          <year>2012</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref23">
        <mixed-citation>
          23.
          <string-name>
            <given-names>T.</given-names>
            <surname>Mancini</surname>
          </string-name>
          ,
          <string-name>
            <given-names>F.</given-names>
            <surname>Mari</surname>
          </string-name>
          ,
          <string-name>
            <given-names>A.</given-names>
            <surname>Massini</surname>
          </string-name>
          ,
          <string-name>
            <given-names>I.</given-names>
            <surname>Melatti</surname>
          </string-name>
          ,
          <string-name>
            <given-names>F.</given-names>
            <surname>Merli</surname>
          </string-name>
          , and
          <string-name>
            <given-names>E.</given-names>
            <surname>Tronci</surname>
          </string-name>
          .
          <article-title>System level formal verification via model checking driven simulation</article-title>
          .
          <source>In Proc. CAV</source>
          <year>2013</year>
          , volume
          <volume>8044</volume>
          <source>of LNCS</source>
          . Springer,
          <year>2013</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref24">
        <mixed-citation>
          24.
          <string-name>
            <given-names>T.</given-names>
            <surname>Mancini</surname>
          </string-name>
          ,
          <string-name>
            <given-names>F.</given-names>
            <surname>Mari</surname>
          </string-name>
          ,
          <string-name>
            <given-names>A.</given-names>
            <surname>Massini</surname>
          </string-name>
          ,
          <string-name>
            <surname>I. Melatti</surname>
          </string-name>
          ,
          <string-name>
            <surname>I. Salvo</surname>
          </string-name>
          , and
          <string-name>
            <given-names>E.</given-names>
            <surname>Tronci</surname>
          </string-name>
          .
          <article-title>On minimising the maximum expected verification time</article-title>
          .
          <source>IPL</source>
          ,
          <volume>122</volume>
          ,
          <year>2017</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref25">
        <mixed-citation>
          25.
          <string-name>
            <given-names>T.</given-names>
            <surname>Mancini</surname>
          </string-name>
          ,
          <string-name>
            <given-names>F.</given-names>
            <surname>Mari</surname>
          </string-name>
          ,
          <string-name>
            <given-names>A.</given-names>
            <surname>Massini</surname>
          </string-name>
          ,
          <string-name>
            <surname>I. Melatti</surname>
          </string-name>
          , and
          <string-name>
            <given-names>E.</given-names>
            <surname>Tronci</surname>
          </string-name>
          .
          <article-title>Anytime system level verification via random exhaustive hardware in the loop simulation</article-title>
          .
          <source>In Proc. DSD</source>
          <year>2014</year>
          . IEEE,
          <year>2014</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref26">
        <mixed-citation>
          26.
          <string-name>
            <given-names>T.</given-names>
            <surname>Mancini</surname>
          </string-name>
          ,
          <string-name>
            <given-names>F.</given-names>
            <surname>Mari</surname>
          </string-name>
          ,
          <string-name>
            <given-names>A.</given-names>
            <surname>Massini</surname>
          </string-name>
          ,
          <string-name>
            <surname>I. Melatti</surname>
          </string-name>
          , and
          <string-name>
            <given-names>E.</given-names>
            <surname>Tronci</surname>
          </string-name>
          .
          <article-title>System level formal verification via distributed multi-core hardware in the loop simulation</article-title>
          .
          <source>In Proc. PDP</source>
          <year>2014</year>
          . IEEE,
          <year>2014</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref27">
        <mixed-citation>
          27.
          <string-name>
            <given-names>T.</given-names>
            <surname>Mancini</surname>
          </string-name>
          ,
          <string-name>
            <given-names>F.</given-names>
            <surname>Mari</surname>
          </string-name>
          ,
          <string-name>
            <given-names>A.</given-names>
            <surname>Massini</surname>
          </string-name>
          ,
          <string-name>
            <surname>I. Melatti</surname>
          </string-name>
          , and
          <string-name>
            <surname>E. Tronci.</surname>
          </string-name>
          <article-title>SyLVaaS: System level formal verification as a service</article-title>
          .
          <source>In Proc. PDP</source>
          <year>2015</year>
          . IEEE,
          <year>2015</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref28">
        <mixed-citation>
          28.
          <string-name>
            <given-names>T.</given-names>
            <surname>Mancini</surname>
          </string-name>
          ,
          <string-name>
            <given-names>F.</given-names>
            <surname>Mari</surname>
          </string-name>
          ,
          <string-name>
            <given-names>A.</given-names>
            <surname>Massini</surname>
          </string-name>
          ,
          <string-name>
            <surname>I. Melatti</surname>
          </string-name>
          , and
          <string-name>
            <given-names>E.</given-names>
            <surname>Tronci</surname>
          </string-name>
          .
          <article-title>Anytime system level verification via parallel random exhaustive hardware in the loop simulation</article-title>
          .
          <source>Microprocessors and Microsystems</source>
          ,
          <volume>41</volume>
          ,
          <year>2016</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref29">
        <mixed-citation>
          29.
          <string-name>
            <given-names>T.</given-names>
            <surname>Mancini</surname>
          </string-name>
          ,
          <string-name>
            <given-names>F.</given-names>
            <surname>Mari</surname>
          </string-name>
          ,
          <string-name>
            <surname>I. Melatti</surname>
          </string-name>
          ,
          <string-name>
            <given-names>I.</given-names>
            <surname>Salvo</surname>
          </string-name>
          ,
          <string-name>
            <given-names>E.</given-names>
            <surname>Tronci</surname>
          </string-name>
          ,
          <string-name>
            <given-names>J.</given-names>
            <surname>Gruber</surname>
          </string-name>
          ,
          <string-name>
            <given-names>B.</given-names>
            <surname>Hayes</surname>
          </string-name>
          ,
          <string-name>
            <given-names>M.</given-names>
            <surname>Prodanovic</surname>
          </string-name>
          , and
          <string-name>
            <given-names>L.</given-names>
            <surname>Elmegaard</surname>
          </string-name>
          .
          <article-title>Demand-aware price policy synthesis and verification services for smart grids</article-title>
          .
          <source>In Proc. SmartGridComm</source>
          <year>2014</year>
          . IEEE,
          <year>2014</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref30">
        <mixed-citation>
          30.
          <string-name>
            <given-names>T.</given-names>
            <surname>Mancini</surname>
          </string-name>
          ,
          <string-name>
            <given-names>F.</given-names>
            <surname>Mari</surname>
          </string-name>
          ,
          <string-name>
            <surname>I. Melatti</surname>
          </string-name>
          ,
          <string-name>
            <given-names>I.</given-names>
            <surname>Salvo</surname>
          </string-name>
          ,
          <string-name>
            <given-names>E.</given-names>
            <surname>Tronci</surname>
          </string-name>
          ,
          <string-name>
            <given-names>J.K.</given-names>
            <surname>Gruber</surname>
          </string-name>
          ,
          <string-name>
            <given-names>B.</given-names>
            <surname>Hayes</surname>
          </string-name>
          ,
          <string-name>
            <given-names>M.</given-names>
            <surname>Prodanovic</surname>
          </string-name>
          , and
          <string-name>
            <surname>L. Elmegaard.</surname>
          </string-name>
          <article-title>User flexibility aware price policy synthesis for smart grids</article-title>
          .
          <source>In Proc. DSD</source>
          <year>2015</year>
          . IEEE,
          <year>2015</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref31">
        <mixed-citation>
          31.
          <string-name>
            <given-names>T.</given-names>
            <surname>Mancini</surname>
          </string-name>
          ,
          <string-name>
            <given-names>E.</given-names>
            <surname>Tronci</surname>
          </string-name>
          ,
          <string-name>
            <given-names>I.</given-names>
            <surname>Salvo</surname>
          </string-name>
          ,
          <string-name>
            <given-names>F.</given-names>
            <surname>Mari</surname>
          </string-name>
          ,
          <string-name>
            <given-names>A.</given-names>
            <surname>Massini</surname>
          </string-name>
          ,
          <string-name>
            <given-names>and I.</given-names>
            <surname>Melatti</surname>
          </string-name>
          .
          <article-title>Computing biological model parameters by parallel statistical model checking</article-title>
          .
          <source>In Proc. IWBBIO</source>
          <year>2015</year>
          , volume
          <volume>9044</volume>
          <source>of LNCS</source>
          . Springer,
          <year>2015</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref32">
        <mixed-citation>
          32.
          <string-name>
            <given-names>F.</given-names>
            <surname>Mari</surname>
          </string-name>
          ,
          <string-name>
            <surname>I. Melatti</surname>
          </string-name>
          ,
          <string-name>
            <surname>I. Salvo</surname>
          </string-name>
          , and
          <string-name>
            <given-names>E.</given-names>
            <surname>Tronci</surname>
          </string-name>
          .
          <article-title>Model based synthesis of control software from system level formal specifications</article-title>
          .
          <source>ACM TOSEM</source>
          ,
          <volume>23</volume>
          (
          <issue>1</issue>
          ),
          <year>2014</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref33">
        <mixed-citation>
          33.
          <string-name>
            <given-names>M.</given-names>
            <surname>Mateják</surname>
          </string-name>
          and
          <string-name>
            <given-names>J.</given-names>
            <surname>Kofránek</surname>
          </string-name>
          .
          <article-title>Physiomodel-an integrative physiology in modelica</article-title>
          .
          <source>In Proc. EMBC</source>
          <year>2015</year>
          . IEEE,
          <year>2015</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref34">
        <mixed-citation>
          34.
          <string-name>
            <given-names>W.</given-names>
            <surname>Raghupathi</surname>
          </string-name>
          and
          <string-name>
            <given-names>V.</given-names>
            <surname>Raghupathi</surname>
          </string-name>
          .
          <article-title>Big data analytics in healthcare: promise and potential</article-title>
          .
          <source>Health Inf. Sci. Sys</source>
          .,
          <volume>2</volume>
          (
          <issue>1</issue>
          ):
          <fpage>3</fpage>
          ,
          <year>2014</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref35">
        <mixed-citation>
          35.
          <string-name>
            <surname>M. Ramirez</surname>
            ,
            <given-names>M.</given-names>
          </string-name>
          <string-name>
            <surname>Papasimeon</surname>
            ,
            <given-names>L.</given-names>
          </string-name>
          <string-name>
            <surname>Benke</surname>
            ,
            <given-names>N.</given-names>
          </string-name>
          <string-name>
            <surname>Lipovetzky</surname>
            ,
            <given-names>T.</given-names>
          </string-name>
          <string-name>
            <surname>Miller</surname>
          </string-name>
          ,
          <article-title>and</article-title>
          <string-name>
            <given-names>A.R.</given-names>
            <surname>Pearce</surname>
          </string-name>
          .
          <article-title>Real-time uav maneuvering via automated planning in simulations</article-title>
          .
          <source>In Proc. IJCAI</source>
          <year>2017</year>
          , pages
          <fpage>5243</fpage>
          -
          <lpage>5245</lpage>
          . AAAI,
          <year>2017</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref36">
        <mixed-citation>
          36.
          <string-name>
            <given-names>S.</given-names>
            <surname>Röblitz</surname>
          </string-name>
          ,
          <string-name>
            <given-names>C.</given-names>
            <surname>Stötzel</surname>
          </string-name>
          ,
          <string-name>
            <given-names>P.</given-names>
            <surname>Deuflhard</surname>
          </string-name>
          ,
          <string-name>
            <given-names>H.M.</given-names>
            <surname>Jones</surname>
          </string-name>
          ,
          <string-name>
            <given-names>D.-O.</given-names>
            <surname>Azulay</surname>
          </string-name>
          , P. van der Graaf, and
          <string-name>
            <given-names>S.W.</given-names>
            <surname>Martin</surname>
          </string-name>
          .
          <article-title>A mathematical model of the human menstrual cycle for the administration of GnRH analogues</article-title>
          .
          <source>J. Theor. Biol</source>
          .,
          <volume>321</volume>
          ,
          <year>2013</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref37">
        <mixed-citation>
          37.
          <string-name>
            <given-names>P.P.</given-names>
            <surname>Roy</surname>
          </string-name>
          and
          <string-name>
            <given-names>K.</given-names>
            <surname>Roy</surname>
          </string-name>
          .
          <article-title>Molecular docking and qsar studies of aromatase inhibitor androstenedione derivatives</article-title>
          .
          <source>J. Pharm. Pharmacol</source>
          ,
          <volume>62</volume>
          (
          <issue>12</issue>
          ):
          <fpage>1717</fpage>
          -
          <lpage>1728</lpage>
          ,
          <year>2010</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref38">
        <mixed-citation>
          38. E.D. Sontag.
          <source>Mathematical Control Theory: Deterministic Finite Dimensional Systems (2nd Ed.)</source>
          . Springer,
          <year>1998</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref39">
        <mixed-citation>
          39. E. Tronci,
          <string-name>
            <given-names>T.</given-names>
            <surname>Mancini</surname>
          </string-name>
          , I. Salvo,
          <string-name>
            <given-names>S.</given-names>
            <surname>Sinisi</surname>
          </string-name>
          ,
          <string-name>
            <given-names>F.</given-names>
            <surname>Mari</surname>
          </string-name>
          ,
          <string-name>
            <surname>I. Melatti</surname>
          </string-name>
          ,
          <string-name>
            <given-names>A.</given-names>
            <surname>Massini</surname>
          </string-name>
          ,
          <string-name>
            <given-names>F.</given-names>
            <surname>Davì</surname>
          </string-name>
          ,
          <string-name>
            <given-names>T.</given-names>
            <surname>Dierkes</surname>
          </string-name>
          ,
          <string-name>
            <given-names>R.</given-names>
            <surname>Ehrig</surname>
          </string-name>
          ,
          <string-name>
            <given-names>S.</given-names>
            <surname>Röblitz</surname>
          </string-name>
          ,
          <string-name>
            <given-names>B.</given-names>
            <surname>Leeners</surname>
          </string-name>
          ,
          <string-name>
            <given-names>T. H. C.</given-names>
            <surname>Krüger</surname>
          </string-name>
          ,
          <string-name>
            <given-names>M.</given-names>
            <surname>Egli</surname>
          </string-name>
          , and
          <string-name>
            <given-names>F.</given-names>
            <surname>Ille</surname>
          </string-name>
          .
          <article-title>Patient-specific models from inter-patient biological models and clinical records</article-title>
          .
          <source>In Proc. FMCAD</source>
          <year>2014</year>
          . IEEE,
          <year>2014</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref40">
        <mixed-citation>
          40.
          <string-name>
            <surname>M. Vallati</surname>
            ,
            <given-names>D.</given-names>
          </string-name>
          <string-name>
            <surname>Magazzeni</surname>
            ,
            <given-names>B.</given-names>
          </string-name>
          <string-name>
            <surname>De Schutter</surname>
            ,
            <given-names>L.</given-names>
          </string-name>
          <string-name>
            <surname>Chrpa</surname>
            , and
            <given-names>T.L.</given-names>
          </string-name>
          <string-name>
            <surname>McCluskey</surname>
          </string-name>
          .
          <article-title>Efficient macroscopic urban traffic models for reducing congestion: A pddl+ planning approach</article-title>
          .
          <source>In Proc. AAAI</source>
          <year>2016</year>
          , pages
          <fpage>3188</fpage>
          -
          <lpage>3194</lpage>
          ,
          <year>2016</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref41">
        <mixed-citation>
          41. S.C. van
          <string-name>
            <surname>Dijkman</surname>
            ,
            <given-names>S.G.</given-names>
          </string-name>
          <string-name>
            <surname>Wicha</surname>
            ,
            <given-names>M.</given-names>
          </string-name>
          <string-name>
            <surname>Danhof</surname>
            , and
            <given-names>O.E. Della</given-names>
          </string-name>
          <string-name>
            <surname>Pasqua</surname>
          </string-name>
          .
          <article-title>Individualized dosing algorithms and therapeutic monitoring for antiepileptic drugs</article-title>
          .
          <source>Clin. Pharmacol</source>
          . Ther.,
          <volume>103</volume>
          (
          <issue>4</issue>
          ):
          <fpage>663</fpage>
          -
          <lpage>673</lpage>
          ,
          <year>2018</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref42">
        <mixed-citation>
          42.
          <string-name>
            <given-names>S.</given-names>
            <surname>Willmann</surname>
          </string-name>
          ,
          <string-name>
            <given-names>J.</given-names>
            <surname>Lippert</surname>
          </string-name>
          ,
          <string-name>
            <given-names>M.</given-names>
            <surname>Sevestre</surname>
          </string-name>
          ,
          <string-name>
            <given-names>J.</given-names>
            <surname>Solodenko</surname>
          </string-name>
          ,
          <string-name>
            <given-names>F.</given-names>
            <surname>Fois</surname>
          </string-name>
          , and
          <string-name>
            <given-names>W.</given-names>
            <surname>Schmitt</surname>
          </string-name>
          . Pksim®
          <article-title>: a physiologically based pharmacokinetic 'whole-body' model</article-title>
          .
          <source>BIOSILICO</source>
          ,
          <volume>1</volume>
          (
          <issue>4</issue>
          ):
          <fpage>121</fpage>
          -
          <lpage>124</lpage>
          ,
          <year>2003</year>
          .
        </mixed-citation>
      </ref>
    </ref-list>
  </back>
</article>