oracle的安全关注这几个人就可以：
David Litchfield http://www.davidlitchfield.com/Alexander Kornbrust http://blog.red-database-security.com/Pete Finnigan http://www.petefinnigan.com/weblog/entries/
还有http://www.petefinnigan.com/orasec.htm
