On the Generalization Properties of Adversarial Training - Yue Xing; Qifan Song; Guang Cheng (2020)