Method and apparatus for preventing domain name hijacking

A method for preventing domain name hijacking is disclosed in the present invention, comprising: capturing a network data packet of a host; extracting information of correspondence relation between a domain name and an IP address from the network data packet; determining whether a Domain Name System (DNS) is hijacked on the basis of the extracted information of correspondence relation; modifying the IP address as an confirmed IP address in response that the DNS is hijacked; discharging the network data packet after modifying the IP address, thus improving the accuracy and success rate of the host accessing the network and enhancing the reliability and security of the host accessing the network.