There is provided a traffic management apparatus including a memory, and a processor coupled to the memory and the processor configured to select a base model based on history information stored in the memory so as to generate a traffic model, obtain a predicted value of the traffic according to the traffic model, and detect traffic abnormality based on the predicted value and an actual measurement value of the traffic.