The application discloses
a domain name resolution method and device based on
domain name request risk management and control, the method comprises the following steps: identifying
domain name requests as normal
domain name requests or abnormal domain name requests; according to the user domain name access behavior
data set and the abnormal domain name association strength, evaluating the security rating and the security
score of the user; sending the normal domain name requests initiated by users with different security ratings to the DNS
server subset cluster corresponding to their levels, so that the DNS
server subset cluster of the level responds to the normal domain name requests in order based on the security
score; predicting the normal domain names with
high probability of access to form
a domain name resource
list, which is used to cache the domain name resource
list to the selected DNS
server when the security rating of the user is higher than the set threshold, so as to improve the domain
name resolution cache hit rate and the resolution efficiency. The application solves the problem of reduced performance of the domain
name server caused by the low
utilization rate of the conventional DNS server due to the
zombie network attack.