Abstract: Provided by the present invention is a responding and processing method for a domain name system security extensions (DNSSEC) negative response. The responding method comprises the following steps: step A1, an authoritative domain name system (DNS) server loading DNS data by means of zone files; step A3, the authoritative DNS server conducting SHA1 encryption and base32 coding calculation on all loaded domain names and saving calculation results; and step A5, the authoritative DNS server receiving a DNS query. By means of the present invention, the responding speed of a DNSSEC negative response does not obviously decrease compared to ordinary queries. According to a characteristic, wherein the length of the DNSSEC negative response message increases a lot compared to a normal response message, the present invention may detect a distributed denial-of-service (DDOS) attack against a DNSSEC negative response query.