I. INTRODUCTION

II. PRACTICAL ADVERSARIAL ATTACKS IN HUMAN SURVEILLANCE FRAMEWORK  
A. Digital adversarial attacks  
B. Physical adversarial attacks  

III. HUMAN-DESIGNED ADVERSARIAL ATTACKS

IV. MACHINE-LEARNED ADVERSARIAL ATTACKS  
A. Surveillance Human Detection Attacks  
B. Surveillance Human Identification Attacks  
D. Surveillance Action Recognition Attacks  
E. Adversarial Attacks beyond Visible  
F. Summary of Different Adversarial Attack Methods

V. DEFENDING PHYSICAL ADVERSARIAL ATTACKS  
C. Defending Surveillance Action Recognition Attacks

VI. DISCUSSION AND CONCLUSIONS