> The truth is, that with the right behaviour you probably don't need any AV product. I'm sceptical. Conventional cybersecurity wisdom is to take a serious app

> The truth is, that with the right behaviour you probably don't need any AV product. I'm sceptical. Conventional cybersecurity wisdom is to take a serious approach to both keeping nasties out of your systems, and limiting the damage that may arise if/when nasties make their way in. (I'm using nasties to cover everything from infected files to unauthorised SSH sessions.) > For all the other stuff (zero days) AV software won't help you That doesn't sound right. Trivially, AV will help you against all malware that the AV is able to protect against. If you always do a perfect job at keeping that stuff out of your systems, then sure, AV adds no value, but I wouldn't assume that the premise holds. > AV software will often even increase the attack surface of your system True, and this is especially troubling considering AV code tends to run with high privileges, but that doesn't show that AV generally does more harm than good. The balance presumably depends on the quality of the AV you're using. > AV software is not a substitute for education. No one is suggesting that it is, they're saying it's a useful additional measure for some systems.