1. Introduction  
2. Attack framework  
3. Adversary goals  
3.1. Classification  
4. Transformations  
4.1. Any replacement  
4.4. Synonyms  
4.6. Phrase manipulations  
4.7. Set of rules  
5. Search methods  
5.1. Preliminaries  
5.2. Algorithms  
6. Constraints  
6.1. Readability  
6.3. Performance  
7. Conclusion