Adversarial Training is a Form of Data-dependent Operator Norm Regularization | Read Paper on Bytez