A dual-stream deep learning architecture for business impact scoring and alert escalation

Mohammed Saad Javeed, Mst Moushumi Khatun, Jobayar Alom, Rahomotul Islam and Hashibul Ahsan Shoaib

PLOS ONE, 2026, vol. 21, issue 7, 1-23

Abstract: Modern network monitoring systems generate massive volumes of telemetry data, yet most existing anomaly detection models fail to prioritize alerts according to their operational urgency and business impact. This limitation results in delayed incident responses and inefficient alert management in Network Operations Centers. To address this gap, this study proposes a Dual-Stream Predictive Alert Escalation Framework that integrates temporal failure pattern learning with business impact-aware alert prioritization. The proposed architecture consists of two key components: a bidirectional temporal encoder for modeling multivariate Key Performance Indicator (KPI) time-series data, and an auxiliary severity encoder that captures contextual metadata related to operational risk and service criticality. The outputs of these two learning streams are combined through an attention-based fusion mechanism, and a Business Impact Scoring (BIS) layer generates impact-weighted escalation decisions for proactive incident management. Experimental evaluations using real-world KPI datasets and the AI4I_2020 predictive maintenance dataset demonstrate the superior performance of the proposed framework compared to baseline methods such as LSTM, GRU, CNN-LSTM, and BiLSTM-VAE. On the combined multivariate KPI dataset, the model achieved a precision of 0.94, a recall of 0.92, and an F1-score of 0.93, along with a PR-AUC of 0.95 and a ROC-AUC of 0.94. Under impact-aware evaluation, the framework attained the highest Impact-Weighted F1 (IW-F1) of 0.85 and BIS accuracy of 0.88, resulting in an estimated 31.6% reduction in operational costs through earlier and more accurate escalation of critical events. The suitability of the selected datasets is justified by their complementary roles: publicly available KPI time-series datasets represent real-world network telemetry behavior, while the AI4I_2020 dataset provides structured severity and operational context, enabling joint evaluation of failure prediction accuracy, escalation timeliness, and business impact modeling. By prioritizing alerts based on impact-aware severity rather than raw anomaly scores, the proposed framework directly supports operational cost reduction through earlier mitigation and improved decision-making in network operations. The proposed approach bridges the gap between anomaly detection and intelligent alert management by incorporating business relevance into predictive modeling. This dual-stream architecture offers a scalable and proactive solution for AIOps-driven network reliability and automated service resilience.

Date: 2026
References: Add references at CitEc
Citations:

Downloads: (external link)
https://journals.plos.org/plosone/article?id=10.1371/journal.pone.0350676 (text/html)
https://journals.plos.org/plosone/article/file?id= ... 50676&type=printable (application/pdf)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:plo:pone00:0350676

DOI: 10.1371/journal.pone.0350676

Access Statistics for this article

More articles in PLOS ONE from Public Library of Science
Bibliographic data for series maintained by plosone ().