1. An apparatus for forecasting the security threat level of a network, comprising: a non-transitory computer-readable storage medium having executable computer program logic embodied therein compromising: a processor configured to execute the computer program logic; a security data collection unit for collecting traffic data and intrusion detection data transmitted from an external network to a managed network; a malicious code data collection unit for collecting malicious code data transmitted from a security enterprise network, wherein the security enterprise network is distinct from the managed network; a time series data transformation unit for transforming the data collected by the security data collection unit into time series data; a network traffic analysis unit for analyzing traffic distribution of the managed network using the data collected by the security data collection unit; and a security forecast engine for forecasting security data of the managed network using the time series data obtained by the time data transformation unit, the data analyzed by the network traffic analysis unit, and the data collected by the malicious code data collection unit, wherein the security data includes a forecasted threat level that a malicious code is generated in the managed network, wherein the forecasted threat level that a malicious code is generated in the managed network is forecasted using the malicious code data transmitted from the security enterprise network.