“…We want to be able to restrict the test process to subautom ata of specification and imple m entation that characterize these systems up to symmetry. In papers on exploiting symmetry in model checking [2,8,10,11,12,18], such subautom ata are constructed for explicitly given FSMs by identifying and collapsing symmetrical states. We are concerned with black box testing, and, by definition, it is impossible to refer directly to the states of a black box.…”