Author
Listed:
- Mohammed Saad Javeed
- Mst Moushumi Khatun
- Jobayar Alom
- Rahomotul Islam
- Hashibul Ahsan Shoaib
Abstract
Modern network monitoring systems generate massive volumes of telemetry data, yet most existing anomaly detection models fail to prioritize alerts according to their operational urgency and business impact. This limitation results in delayed incident responses and inefficient alert management in Network Operations Centers. To address this gap, this study proposes a Dual-Stream Predictive Alert Escalation Framework that integrates temporal failure pattern learning with business impact-aware alert prioritization. The proposed architecture consists of two key components: a bidirectional temporal encoder for modeling multivariate Key Performance Indicator (KPI) time-series data, and an auxiliary severity encoder that captures contextual metadata related to operational risk and service criticality. The outputs of these two learning streams are combined through an attention-based fusion mechanism, and a Business Impact Scoring (BIS) layer generates impact-weighted escalation decisions for proactive incident management. Experimental evaluations using real-world KPI datasets and the AI4I_2020 predictive maintenance dataset demonstrate the superior performance of the proposed framework compared to baseline methods such as LSTM, GRU, CNN-LSTM, and BiLSTM-VAE. On the combined multivariate KPI dataset, the model achieved a precision of 0.94, a recall of 0.92, and an F1-score of 0.93, along with a PR-AUC of 0.95 and a ROC-AUC of 0.94. Under impact-aware evaluation, the framework attained the highest Impact-Weighted F1 (IW-F1) of 0.85 and BIS accuracy of 0.88, resulting in an estimated 31.6% reduction in operational costs through earlier and more accurate escalation of critical events. The suitability of the selected datasets is justified by their complementary roles: publicly available KPI time-series datasets represent real-world network telemetry behavior, while the AI4I_2020 dataset provides structured severity and operational context, enabling joint evaluation of failure prediction accuracy, escalation timeliness, and business impact modeling. By prioritizing alerts based on impact-aware severity rather than raw anomaly scores, the proposed framework directly supports operational cost reduction through earlier mitigation and improved decision-making in network operations. The proposed approach bridges the gap between anomaly detection and intelligent alert management by incorporating business relevance into predictive modeling. This dual-stream architecture offers a scalable and proactive solution for AIOps-driven network reliability and automated service resilience.
Suggested Citation
Mohammed Saad Javeed & Mst Moushumi Khatun & Jobayar Alom & Rahomotul Islam & Hashibul Ahsan Shoaib, 2026.
"A dual-stream deep learning architecture for business impact scoring and alert escalation,"
PLOS ONE, Public Library of Science, vol. 21(7), pages 1-23, July.
Handle:
RePEc:plo:pone00:0350676
DOI: 10.1371/journal.pone.0350676
Download full text from publisher
Corrections
All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:plo:pone00:0350676. See general information about how to correct material in RePEc.
If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.
We have no bibliographic references for this item. You can help adding them by using this form .
If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.
For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: plosone (email available below). General contact details of provider: https://journals.plos.org/plosone/ .
Please note that corrections may take a couple of weeks to filter through
the various RePEc services.