A DNS evaluation method and apparatus. The method comprises: determining, according to a DNS traffic log, M domain names in a DNS system, and multiple pieces of feature dimension information about each category in pre-set categories corresponding to each of the M domain names, where M is an integer greater than or equal to 1; determining association identification information associated with each of the M domain names, wherein the association identification information comprises an IP address and/or identity information; determining, according to an association relationship between each of the M domain names and the association identification information, or attribute information about each of the M domain names, a cluster score for each category in the pre-set categories of the DNS system; and determining, according to the cluster score for each category in the pre-set categories of the DNS system, the total system score for the DNS system. Thus, the accuracy of DNS evaluation is improved.