Time Series Forecasting Methods for Creating Digital Signature of Network Segments Using Flow Analysis

This paper presents the use of two methods for creating a digital signature of a network segment based on flow analysis (DSNSF), which can be defined as a traffic characterization of a network segment. This characterization is achieved through the statistical forecasting method Holt-Winters. Furthermore, a modification is proposed to this traditional method aiming towards better results in its use for creating DSNSF. The data used in the tests are flows collected through NetFlow v9. The results demonstrate that the proposed amendment on the Holt-Winters method showed better results creating DSNSF than the traditional method.