Supplementary Material: Efficient and Effective Augmentation Strategy for Adversarial Training