Asymptotic Behavior of Adversarial Training Estimator under $\ell_\infty$-Perturbation