Generalization Properties of Adversarial Training for -ℓ0 Bounded Adversarial Attacks | IEEE Conference Publication | IEEE Xplore