Asymptotic Behavior of Adversarial Training in Binary Classification