R. R. Fatkieva - Ph.D. (Eng.), Senior Research Scientist, Laboratory of Computer and Information Systems, St. Petersburg Institute for Informatics and Automation of the Russian Academy of Sciences (SPIIRAS). E-mail: rrf@iias.spb.su

When choosing a method of network traffic forecasting one must consider the existence of non-stationary processes in the network. Research of the traffic by moving average method showed that the smoothing interval value is important for building the prediction. The choice of this value often causes difficulties due to the presence of cyclic components in the traffic. It is especially difficult if there is a network anomaly. Using exponential smoothing models makes it possible to build a forecast for a short period, but the forecast quality depends on the correct selection of the smoothing factors that require tweaking, especially if we consider non-stationarity of the network processes. Holt-Winters forecasting model takes trends in the initial data series into account, but has the disadvantage of supposing the presence of that trend. This may lead with time to a discrepancy between the forecast and the actual values. Analysis of the models shown in this paper revealed the need to choose a forecast model considering the required time horizon as well as the attack type, as confirmed by the forecast quality estimates above. Usage of the polymodel forecasting system will increase the forecast accuracy. That will in turn give the possibility of eliminating bandwidth violations.