<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Archiving and Interchange DTD v1.0 20120330//EN" "JATS-archivearticle1.dtd">
<article xmlns:xlink="http://www.w3.org/1999/xlink">
  <front>
    <journal-meta />
    <article-meta>
      <title-group>
        <article-title>In Silico Comparison of Continuous Glucose Monitor Failure Mode Strategies for an Artificial Pancreas</article-title>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <string-name>Yunjie (Lisa) Lu</string-name>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Abigail Koay</string-name>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Michael Mayo</string-name>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <aff id="aff0">
          <label>0</label>
          <institution>Department of Computer Science, University of Waikato</institution>
          ,
          <country country="NZ">New Zealand</country>
        </aff>
      </contrib-group>
      <abstract>
        <p>An artificial pancreas is a medical Internet of Thingsbased system consisting of a continuous glucose monitor, an insulin pump, and a micro-controller. The use of artificial pancreas systems is becoming increasingly popular amongst patients with type 1 diabetes due to its effective ability to allow the patient better control of his/her own blood glucose levels compared to other more standard treatments. In this paper, the problem of missing sensor readings in the glucose monitor data is considered. How should the microcontroller (which adjusts the insulin pump based on monitor readings) react when the glucose monitor stops transmitting for an unpredictable period of time? A strategy that answers this question is called a failure mode strategy. In this paper, several potential failure mode strategies are explored in the context of simulation experiments. Results are presented showing that at least one effective and simple failure mode strategy (0.5 &amp; LR&lt;72) exists.</p>
      </abstract>
    </article-meta>
  </front>
  <body>
    <sec id="sec-1">
      <title>INTRODUCTION</title>
      <p>
        An artificial pancreas (AP) [
        <xref ref-type="bibr" rid="ref10">10</xref>
        ] is a real-time, closed-loop insulin
delivery system for patients with type 1 diabetes (T1D). It consists
of three components: a continuous glucose monitor (CGM) [
        <xref ref-type="bibr" rid="ref3">3</xref>
        ], a
controller, and an insulin pump. The CGM estimates the wearer’s
blood glucose level (BGL) by sampling the interstitial fluid in the
subcutaneous tissue beneath the skin; a small needle-like sensor that
is applied usually to the abdomen or the upper arm is used for this
purpose. Readings from the sensor are taken at set intervals, typically
every five minutes, and are sent wirelessly to the controller. The
controller in turn adjusts the rate of delivery of insulin (or insulin dose
size) during the next interval on the basis of CGM readings [
        <xref ref-type="bibr" rid="ref8">8</xref>
        ].
      </p>
      <p>
        In this work, the problem of missing data in the CGM trace is
considered [
        <xref ref-type="bibr" rid="ref2">2</xref>
        ]. Missing data is a potentially significant problem for an
AP because the controller may not have been designed to deal with
this situation, and the default failure mode strategy may be to simply
turn the pump off or revert back to a preset basal rate [
        <xref ref-type="bibr" rid="ref1">1</xref>
        ] [
        <xref ref-type="bibr" rid="ref8">8</xref>
        ]. This
can lead to risks if the user is unaware of the problem. For example,
a reduced insulin dosage at meal times may lead to periods of
severe hyperglycemia, increasing the risk of long-term complications,
for example, heart attack and kidney damage. On the other hand,
if the pump keeps running while the sensor is off, it could
potentially overdose the patient on insulin leading severe hypoglycemia
such as coma or seizure, which can be more life-threatening than
hyperglycemia. Additionally, non-severe hypoglycemia can lead to
discomfort, such as anxiety or blurred vision.
      </p>
      <p>
        Gaps in real CGM traces occur for a variety of reasons. In most
cases, they are benign (e.g. the sensor is no longer accurate and needs
to be replaced) but there is also the possibility of deliberate malicious
interference (for example, [
        <xref ref-type="bibr" rid="ref9">9</xref>
        ] illustrate how the wireless connection
between CGM and controller can be jammed).
      </p>
      <p>
        As mentioned, a simple default strategy if connectivity to the
sensor is lost is to simply turn the insulin pump off or switch to a preset
basal rate. However, this is unsatisfactory for the reasons mentioned
above. An alternative idea is to have the controller replace the
missing CGM readings with estimates, and then use these for the insulin
dose calculations so that the decisions on insulin delivery rate can
still be made. Unfortunately, there is currently no effective method
for dealing with missing CGM readings in real-time [
        <xref ref-type="bibr" rid="ref12">12</xref>
        ], as most
effective time series forecasting (or replacement) methods require
readings from the future.
      </p>
      <p>Therefore in this paper approaches based on changing the
behaviour of the insulin pump when the sensor is down are considered.
It is shown via a set of experiments involving virtual patients and
a state-of-the-art AP controller that viable alternative failure mode
strategies that can replace the simplistic “pump off” strategy exist.
Note that imputation of missing glucose values is not a focus here;
instead we are concerning with how the pump should behave when
the sensor is unavailable.
2</p>
    </sec>
    <sec id="sec-2">
      <title>BACKGROUND</title>
      <p>To perform the comparison of failure mode strategies, a virtual
patient simulator along with a modern AP controller based on fuzzy
logic was used.
2.1</p>
    </sec>
    <sec id="sec-3">
      <title>Virtual Patient Simulator</title>
      <p>
        The simulator utilised in this work is an open-source T1D patient
simulator Simglucose [
        <xref ref-type="bibr" rid="ref11">11</xref>
        ]. The simulator is a re-implementation of
the 2008 version of UVA/Padova T1D simulator described by Dalla
Man et al. [
        <xref ref-type="bibr" rid="ref5">5</xref>
        ] which has been approved by the Food and Drug
Administration (FDA) for pre-clinical trials of specific insulin
treatments such as control algorithms for an AP. In brief, the simulator
models all components of a patient and AP system. There are several
choices for CGM type, each of which come with appropriate sensor
error models and reading limits. Additionally, several different types
of simulated insulin pump are available.
      </p>
      <p>The virtual patient model used by the simulator describes the
glucose/insulin subsystem and is modelled using compartments.
Important processes in the virtual patient simulator include a model of the
gastrointestinal tract, from which the rate of appearance of glucose
in the glucose subsystem is determined during simulated meals; the
insulin subsystem, which models both the rate of appearance of
insulin, its rate of degradation, and its interactions with the liver and
body tissues; and the production and storage of glucose in the liver
and its utilisation in muscle and adipose tissue. Each virtual patient
in the simulator is generated randomly from a joint probability
distribution over tens of physiological parameters, and ten different adult
patients are currently available in the simulator.</p>
      <p>The simulator models meals as well, and the timing and size of
meals in terms of carbohydrate (CHO) count are also randomly
generated from an appropriate probability distribution.</p>
      <p>Figure 1 shows a trace of the simulator’s output for one virtual
patient. The figure shows CGM readings, actual BGL (not always
identical due to sensor lag and error), and the insulin pump rate. The
normoglycemia range (see Table 1) is also shown.
2.2</p>
    </sec>
    <sec id="sec-4">
      <title>Fuzzy Logic Controller</title>
      <p>The controller component of an AP serves the function of monitoring
(and aggregating) incoming CGM sensor trace data, and then using
this information to make making insulin pump rate adjustment
decisions in real time (for example, to reduce the risk of hypoglycemia
induced by a rapid decline in BGL).</p>
      <p>
        Many algorithms have been proposed for solving this control
problem, and they can be broadly grouped into control theory-based
approaches such as proportional-integral-derivative (PID) controllers;
logic-based approaches; adaptive statistical based-approaches (e.g.
based on moving averages); and machine learning-based
approaches [
        <xref ref-type="bibr" rid="ref10">10</xref>
        ]. A drawback of several of these approaches is the need
to either set parameters which are patient-specific (e.g. a PID
controller has at least three important constants to set) or to run the
controller for a period of time in order to train a predictive model.
      </p>
      <p>
        In order to circumvent these issues (mostly), we implemented the
fuzzy logic controller (FLC) proposed by Mauseth et al. [
        <xref ref-type="bibr" rid="ref6">6</xref>
        ] and
recently updated [
        <xref ref-type="bibr" rid="ref7">7</xref>
        ]. The FLC encapsulates expert knowledge about
insulin dosing in the form of fuzzy logic rules. The idea is that the
fuzzy rules comprise knowledge about what an expert diabetes
clinician would do in a given situation where an insulin dose needs to
be set. Since it is a knowledge-based approach, the controller is not
overly dependent on setting constants or training data. Furthermore,
the inputs to the controller are straightforward: the current BGL is
the first input; the BGL velocity (change since the last reading) is the
second input; and the BGL acceleration (how the velocity is
changing) is the third input.
      </p>
      <p>These three inputs are then “fuzzified” (mapped to fuzzy sets), and
following that a fuzzy lookup table containing the expert knowledge
is consulted for optimal dose calculation. In general, the table is
designed such that higher accelerations and velocities lead to higher
doses, while low absolute BGL values and strongly negative
velocities switch the insulin pump off.</p>
      <p>The FLC does have a single patient-specific parameter, the
“personalisation factor” (PF), which can range from zero to ten. The PF
dictates the aggressiveness of the insulin treatment, with a value of
ten corresponding to a very weak treatment (all doses being
multiplied by a factor of 0.002), while a PF value of zero is the strongest
treatment (all doses scaled by 1.74). Most patients should be
expected to have a PF of around five, indicating a scaling factor of 0.92
of the dose computed by the FLC.
3</p>
    </sec>
    <sec id="sec-5">
      <title>METHOD</title>
      <p>In this section, the experimental setup, in particular the methods by
which the PF values are set on a patient-wise basis, and how artificial
missing data gaps were generated in the simulated CGM trace are
described.
3.1</p>
    </sec>
    <sec id="sec-6">
      <title>Optimised PF value</title>
      <p>Each individual has significantly different insulin sensitivity. Some
are more sensitive to insulin, so their blood glucose levels drop
rapidly in response to the same insulin dose than those who are less
sensitive. Thus, the FLC’s PF value is necessarily unique for each
individual.</p>
      <p>To determine the optimal PF value for each adult virtual patient
in the T1D simulator, the following procedure was followed: for
each possible PF value, the simulator was run for ten virtual days
at a sampling interval of five minutes. The amount of time spent in
normoglycemia for each patient and each PF value respectively was
recorded. The PF value for each adult virtual patient which
maximised the time spent in normoglycemia was then selected.
3.2</p>
    </sec>
    <sec id="sec-7">
      <title>Missing Data Generation</title>
      <p>
        One guideline concerning proper usage of CGM [
        <xref ref-type="bibr" rid="ref4">4</xref>
        ] state that about
70-80% coverage of sensor reading coverage is required over two
weeks for calculating metrics. Assuming this is the usual case, then
336 hours of sensor use over two weeks can be expected, leaving 68
hours of total CGM sensor gap over two weeks, or 4.8 hours per day
on average. Additionally, gaps are usually not scattered random
individual sensor readings, but are likely to occur contiguously in blocks
since events such as faults tend to last for significant periods of time.
On the basis of this assumption, we implemented a method to
generate missing data gaps in the CGM trace. Essentially, the program
generates a random start time (between midnight to 1900 hours,
including mealtime) for each gap as well as a random length for the
gap (between 0.5 hours and five hours). See Figure 1 for an example
of the trace with gaps.
3.3
      </p>
    </sec>
    <sec id="sec-8">
      <title>Failure Mode Strategies</title>
      <p>In this section, five different failure model strategies are described.
As a baseline, results for an “ideal” set of simulations in which there
are no sensor trace gaps are also included. The failure mode strategies
are as follows:</p>
      <sec id="sec-8-1">
        <title>1. Pump off</title>
        <p>This strategy simply switches the insulin pump off when sensor
gaps are detected.
2.</p>
        <p>is defined as the average value of the total insulin dose from the
previous one hour. Since there are twelve readings per hour in an
AP with a five minute reading interval, the average dose is defined
as
=
1
12 n=1
12
X di
(1)
where di is the insulin dose i adjustments previously. The
strategy operates the pump at a constant rate of .
3. 0.5</p>
        <p>On the basis that may produce doses that are sometimes too
high, the 0.5 strategy is calculated in the same way, except that
the constant dose size is halved.</p>
      </sec>
      <sec id="sec-8-2">
        <title>4. Random choice (Rand choice)</title>
        <p>Random choice constructs a method that randomly chooses a
value from the last one hour of insulin dosages, on the basis that
varying the dose size might be beneficial compared to the
strategies which computes constant doses. The expected value of the
random choice strategy equivalent to the dose as calculated by .
5. Hybrid method (0.5 &amp; LR&lt;72)</p>
        <p>Following initial results showing that the 0.5 strategy was
effective, a new strategy was defined that extended 0.5 with a
constraint: if the last reading (LR) before the sensor is down is smaller
than a preset value (in this case, 72.0 mg/dL), then the pump will
be turned off; otherwise, the 0.5 strategy will be applied. 72
mg/dL was chosen as a threshold because it is just above the L1
hypoglycemia threshold defined in Table 1, and it is desirable that
this threshold is not crossed. The equation for this strategy is:
dose =
(0
0:5
if LR &lt;72.0
otherwise
(2)
4</p>
      </sec>
    </sec>
    <sec id="sec-9">
      <title>EVALUATION</title>
      <p>In each experiments, 100 simulated days per adult virtual patient per
failure mode strategy was run. This gave a total of 10 6 runs per
patient. Each run took approximately ten minutes on a laptop with
a 2.6GHz Intel Core i7-9750 CPU processor. For all experiments,
the simulated GuardianRT CGM was used in conjunction with the
Insulet insulin pump.</p>
      <p>Table 2 shows for each patient with their personalised PF value
according to the method of selecting the optimal PF value described
in the previous section.</p>
      <p>The effectiveness of each failure mode strategy was then
determined by calculating the time spent in standard glycemic ranges as
defined in Table 1. As mentioned, hypoglycemia can be considerably
more dangerous than hyperglycemia, so therefore time spent in the
L2 Hypoglycemia range is the most significant statistic in the results.</p>
      <p>Figure 2 shows that these five strategies provide similar
performance in the L1 Hyperglycemia range. All the median values are</p>
      <sec id="sec-9-1">
        <title>Range</title>
        <p>L2 Hypoglycemia
L1 Hypoglycemia
Normoglycemia
L1 Hyperglycemia
L2 Hyperglycemia</p>
      </sec>
      <sec id="sec-9-2">
        <title>Definition</title>
        <p>&lt;54 mg/dL (&lt;3.0 mmol/L)
54 to &lt;70 mg/dL (3.0 to &lt;3.9 mmol/L)
70 to 180 mg/dL (3.9 to 10.0 mmol/L)
&gt;180 to 250 mg/dL (&gt;10.0 to 13.9 mmol/L)
&gt;250 mg/dL (&gt;13.9 mmol/L)
quite close to each other (i.e. between 18.21 and 19.44). and
Rand choice perform quite well most of the time. The lowest
percentage obtained due to Rand choice is below 5% for one patient.
However, 0.5 and hybrid strategy have a more stable performance
r
e
p
y1H 51
L
e
m
it
% 01
5
2
0
2
5
0</p>
        <p>19.44
18.4
18.51
19.2</p>
        <p>19.19
18.21
with no significant outliers.</p>
        <p>% time L2 Hyper in different strategies
nificantly underperform compared to the other strategies. In terms of
the more dangerous L2 hypoglycemia range (Figure 6), the pump off
and hybrid strategies work best.</p>
        <p>% time L1 Hypo in different strategies
ypo 3
H
1
L
e
m
it% 2
o
p
yL2H .06
e
m
i
t% .40
5
4
1
0
5
0
0
8
0
2
0</p>
        <p>No MV</p>
        <p>Figure 4 depicts time spent in normoglycemia. Unlike the other
figures where lower is better, in this case higher is better. The figure
indicates that the last four strategies output similar median values
which are all quite close to the baseline no missing value strategy.
The best two strategies that give us the highest median time are again
and Rand choice. However, it is quite noticeable that these two
methods, especially Rand choice, as not stable, as observed before.
The percentage time spent in normoglycemia can drop to under 10%
for one of these strategies. The 0.5 &amp; LR&lt;72 strategy gives the
most stable performance across virtual patients.</p>
        <p>Figure 5 and 6 show time spent in the hypoglycemic ranges. From
these box plots, it can be observed that both and Rand choice
sigIn this study, it was found that the hybrid method works well and is
furthermore simple to implement. In most cases, it was close to the
no missing values baseline strategy, especially in terms of time spent
in the critical L2 hypoglycemia range.</p>
        <p>The hybrid method could therefore be used as a baseline for the
development of more sophisticated failure mode strategies (such as
those based on online CGM imputation or machine learning
methods) in the future. It is also important to test this failure mode strategy
with other controllers and on other twenty patients (i.e., ten children
and ten adolescent patients) in addition to the FLC and ten adult
patients analysed in this paper.</p>
      </sec>
    </sec>
  </body>
  <back>
    <ref-list>
      <ref id="ref1">
        <mixed-citation>
          [1]
          <string-name>
            <given-names>B.</given-names>
            <surname>Wayne Bequette</surname>
          </string-name>
          , '
          <article-title>Fault detection and safety in closed-loop artificial pancreas systems'</article-title>
          ,
          <source>Journal of Diabetes Science and Technology</source>
          ,
          <volume>8</volume>
          (
          <issue>6</issue>
          ),
          <fpage>1204</fpage>
          -
          <lpage>1214</lpage>
          , (
          <year>2014</year>
          ). PMID:
          <volume>25049365</volume>
          .
        </mixed-citation>
      </ref>
      <ref id="ref2">
        <mixed-citation>
          [2]
          <string-name>
            <given-names>Helga</given-names>
            <surname>Blauw</surname>
          </string-name>
          , Patrick Keith-Hynes,
          <article-title>Robin Koops, and</article-title>
          <string-name>
            <given-names>J.</given-names>
            <surname>Hans</surname>
          </string-name>
          <string-name>
            <surname>DeVires</surname>
          </string-name>
          , '
          <article-title>A review of safety and design requirements of the artificial pancreas'</article-title>
          ,
          <source>Annals of biomedical engineering</source>
          ,
          <volume>44</volume>
          (
          <issue>11</issue>
          ),
          <fpage>3158</fpage>
          -
          <lpage>3172</lpage>
          , (
          <year>2016</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref3">
        <mixed-citation>
          [3]
          <string-name>
            <given-names>Giacomo</given-names>
            <surname>Cappon</surname>
          </string-name>
          , Giada Acciaroli, Martina Vettoretti, Andrea Facchinetti, and Giovanni Sparacino, '
          <article-title>Wearable continuous glucose monitoring sensors: A revolution in diabetes treatment'</article-title>
          ,
          <source>Electronics</source>
          ,
          <volume>6</volume>
          (
          <issue>3</issue>
          ),
          <fpage>65</fpage>
          , (
          <year>2017</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref4">
        <mixed-citation>
          [4]
          <string-name>
            <given-names>Thomas</given-names>
            <surname>Danne</surname>
          </string-name>
          , Revital Nimri, Tadej Battelino, Richard M. Bergenstal, Kelly L.
          <string-name>
            <surname>Close</surname>
            ,
            <given-names>J.</given-names>
          </string-name>
          <string-name>
            <surname>Hans</surname>
            <given-names>DeVries</given-names>
          </string-name>
          , Satish Garg, Lutz Heinemann, Irl Hirsch, Stephanie A.
          <string-name>
            <surname>Amiel</surname>
            , Roy Beck, Emanuele Bosi, Bruce Buckingham, Claudio Cobelli, Eyal Dassau,
            <given-names>Francis J.</given-names>
          </string-name>
          <string-name>
            <surname>Doyle</surname>
          </string-name>
          , Simon Heller, Roman Hovorka, Weiping Jia, Tim Jones, Olga Kordonouri, Boris Kovatchev, Aaron Kowalski, Lori Laffel, David Maahs,
          <string-name>
            <surname>Helen R. Murphy</surname>
          </string-name>
          , Kirsten Nørgaard, Christopher G. Parkin, Eric Renard, Banshi Saboo, Mauro Scharf, William V. Tamborlane, Stuart A.
          <string-name>
            <surname>Weinzimer</surname>
          </string-name>
          , and Moshe Phillip, '
          <article-title>International consensus on use of continuous glucose monitoring'</article-title>
          ,
          <source>Diabetes Care</source>
          ,
          <volume>40</volume>
          (
          <issue>12</issue>
          ),
          <fpage>1631</fpage>
          -
          <lpage>1640</lpage>
          , (
          <year>2017</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref5">
        <mixed-citation>
          [5]
          <string-name>
            <given-names>Chiara</given-names>
            <surname>Dalla</surname>
          </string-name>
          <string-name>
            <surname>Man</surname>
          </string-name>
          , Francesco Micheletto, Dayu Lv, Marc Breton, Boris Kovatchev, and Claudio Cobelli, '
          <article-title>The UVA/Padova type 1 diabetes simulator: New features'</article-title>
          ,
          <source>Journal of Diabetes Science and Technology</source>
          ,
          <volume>8</volume>
          (
          <issue>1</issue>
          ),
          <fpage>26</fpage>
          -
          <lpage>34</lpage>
          , (
          <year>2014</year>
          ). PMID:
          <volume>24876534</volume>
          .
        </mixed-citation>
      </ref>
      <ref id="ref6">
        <mixed-citation>
          [6]
          <string-name>
            <given-names>Richard</given-names>
            <surname>Mauseth</surname>
          </string-name>
          , Irl B.
          <string-name>
            <surname>Hirsch</surname>
          </string-name>
          , Jennifer Bollyky, Robert Kircher, Don Matheson, Srinath Sanda, and Carla Greenbaum, '
          <article-title>Use of a “fuzzy logic” controller in a closed-loop artificial pancreas'</article-title>
          ,
          <source>Diabetes Technology &amp; Therapeutics</source>
          ,
          <volume>15</volume>
          (
          <issue>8</issue>
          ),
          <fpage>628</fpage>
          -
          <lpage>633</lpage>
          , (
          <year>2013</year>
          ). PMID:
          <volume>23829285</volume>
          .
        </mixed-citation>
      </ref>
      <ref id="ref7">
        <mixed-citation>
          [7]
          <string-name>
            <given-names>Richard</given-names>
            <surname>Mauseth</surname>
          </string-name>
          ,
          <string-name>
            <given-names>Sandra M.</given-names>
            <surname>Lord</surname>
          </string-name>
          , Irl B.
          <string-name>
            <surname>Hirsch</surname>
            , Robert C. Kircher,
            <given-names>Don P.</given-names>
          </string-name>
          <string-name>
            <surname>Matheson</surname>
            , and
            <given-names>Carla J.</given-names>
          </string-name>
          <string-name>
            <surname>Greenbaum</surname>
          </string-name>
          , '
          <article-title>Stress testing of an artificial pancreas system with pizza and exercise leads to improvements in the system's fuzzy logic controller'</article-title>
          ,
          <source>Journal of Diabetes Science and Technology</source>
          ,
          <volume>9</volume>
          (
          <issue>6</issue>
          ),
          <fpage>1253</fpage>
          -
          <lpage>1259</lpage>
          , (
          <year>2015</year>
          ). PMID:
          <volume>26370244</volume>
          .
        </mixed-citation>
      </ref>
      <ref id="ref8">
        <mixed-citation>
          [8]
          <string-name>
            <surname>Charrise</surname>
            <given-names>M.</given-names>
          </string-name>
          <string-name>
            <surname>Ramkissoon</surname>
            ,
            <given-names>B.</given-names>
          </string-name>
          <string-name>
            <surname>Wayne Bequette Brian Aufderheide</surname>
          </string-name>
          , and Josep Vehi, '
          <article-title>A review of safety and hazards associated with the artificial pancreas'</article-title>
          ,
          <source>IEEE reviews in biomedical engineering</source>
          ,
          <volume>10</volume>
          ,
          <fpage>44</fpage>
          -
          <lpage>62</lpage>
          , (
          <year>2017</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref9">
        <mixed-citation>
          [9]
          <string-name>
            <given-names>Luca</given-names>
            <surname>Reverberi</surname>
          </string-name>
          and David Oswald, '
          <article-title>Breaking (and fixing) a widely used continuous glucose monitoring system'</article-title>
          ,
          <source>in 11th USENIX Workshop on Offensive Technologies (WOOT 17)</source>
          , Vancouver,
          <string-name>
            <surname>BC</surname>
          </string-name>
          , (
          <year>August 2017</year>
          ). USENIX Association.
        </mixed-citation>
      </ref>
      <ref id="ref10">
        <mixed-citation>
          [10]
          <string-name>
            <surname>Dawei</surname>
            <given-names>Shi</given-names>
          </string-name>
          , Sunil Deshpande, Eyal Dassau, and
          <string-name>
            <surname>Francis J. Doyle</surname>
          </string-name>
          , 'Chapter 1
          <article-title>- Feedback control algorithms for automated glucose management in t1dm: the state of the art'</article-title>
          , in The Artificial Pancreas, eds., Ricardo S.
          <article-title>Sa´nchez-Pen˜a</article-title>
          and Daniel R. Chern˜avvsky,
          <fpage>1</fpage>
          -
          <lpage>27</lpage>
          , Academic Press, (
          <year>2019</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref11">
        <mixed-citation>
          [11]
          <string-name>
            <given-names>Jinyu</given-names>
            <surname>Xie</surname>
          </string-name>
          .
          <source>Simglucose v0.2</source>
          .1, https://github.com/jxx123/simglucose, last accessed 28
          <source>Feb</source>
          <year>2020</year>
          ,
          <year>2018</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref12">
        <mixed-citation>
          [12]
          <string-name>
            <surname>Sara</surname>
            <given-names>Zulj</given-names>
          </string-name>
          , Paulo Carvalho, Rogerio Ribeiro, and Ratko Magjarevic, '
          <article-title>Handling missing data in CGM records', in Future Trends in Biomedical and Health Informatics and</article-title>
          Cybersecurity in Medical Devices, eds.,
          <string-name>
            <surname>Kang-Ping</surname>
            <given-names>Lin</given-names>
          </string-name>
          , Ratko
          <string-name>
            <surname>Magjarevic</surname>
          </string-name>
          , and Paulo de Carvalho, pp.
          <fpage>420</fpage>
          -
          <lpage>427</lpage>
          , Cham, (
          <year>2020</year>
          ). Springer International Publishing.
        </mixed-citation>
      </ref>
    </ref-list>
  </back>
</article>