Adversarial Transferability and Generalization in Robust Deep Learning