Adversarial Training from Mean Field Perspective