I. Introduction  

III. Attack at the Pre-Training Stage  

IV. Attack at the Training Stage  

V. Attack at the Post-Training Stage  

VI. Attack at the Deployment Stage  

VII. Attack at the Inference Stage  

VIII. Adversarial Machine Learning in Other Scenarios  

IX. Applications  

X. Discussions  

XI. Summary  