Before revision:  In this study , we analyze the smoothness of the loss function of adversarial training for binary linear classification and for general cases considering the dependence .
After revision:  In this study , we analyze the smoothness of the loss function of adversarial training using the optimal attacks for the model parameter in more detail .