1 Introduction  
2 Taxonomy of Poisoning Attacks against Recommendation  
3 Component-Specific Attacks  
4 Goal-Driven Attacks  
5 Capability Probing Attacks  
6 Challenges and Future Directions  
7 ARLib: A Library for Attacks against Recommendation  
8 Conclusion