1 Introduction  
2 Preliminary  
2.1 Terminology and Notations  
2.2 Formulation of Adversarial Transferability  
2.3 Evaluation of Adversarial Transferability  
3 Optimization-Based Transferable Attacks  
4 Generation-Based Transferable Attacks  
5 Adversary Transferability Beyond Image Classification  
6 Challenges, Opportunities and Connections to Broader Topics  
6.1 Challenges and Opportunities  
6.2 Connections to Broader Topics  
7 Conclusion