Automatic Dependent Surveillance-Broadcast (ADS-B) is the successor surveillance technology which is used in aviation, and according to Federal Aviation Administration (FAA) and European Aviation Safety Agency (EASA), the vast majority of aircraft must be equipped with it by January and June 2020, respectively. However, ADS-B, as it is utilized today, is not free from problems. This paper discusses observed attacks and corresponding methods that can be realized over ADS-B surveillance technology and consequently, compromise its availability, integrity or confidentiality. Nonetheless, as an opening, the paper studies essential characteristics of ADS-B, functionality, deployment status and other relevant facts and figures for a better understanding of the basics, current state, and pitfalls of the state-of-the-art technology for air traffic surveillance and control. Then this paper proceeds to study complexity, severity, and effect of the attacks by providing some examples. Ultimately, the paper complements the previous sections by presenting an outline of the proposed solutions and mitigation techniques and survey the most distinguished ones.