A communication device for communicating data over a low power wide area, LPWA, communication network, wherein the communication device comprises: a processor configured to process data; a memory (113, 115) configured to store data; a radio configured to receive data from and transmit data to neighbouring communication devices (110b-e) and/or a base station; and a security system configured to operate one or more sets of logically separated security domains (111a-c, 113a-c, 115a-c), including a first set of security domains (111a, 113a, 115a), on the processor and the memory (113, 115), wherein each set of security domains comprises a processor security domain (111a-c) and a memory security domain (113a-c, 115a-c); wherein the processor security domain of the first set of security domains (111a, 113a, 115a) is configured to route the data received from neighbouring communication devices (110b-e) to other neighbouring communication devices (110b-e) and/or the base station of the LPWA communication network on the basis of the routing scheme stored in the memory security domain (113a, 115a) of the first set of security domains (111a, 113a, 115a) and wherein the routing scheme is based on information about a respective security credibility of the respective neighbouring communication devices (110b-e) and wherein the processor security domain of the first set of security domains (111a, 113a, 115a) is configured to dynamically adjust the routing scheme stored in the memory security domain (113a, 115a) of the first set of security domains (111a, 113a, 115a) on the basis of information received from the neighbouring communication devices (110b-e) and/or a network management entity of the LPWA communication network. a processor configured to process data; a memory (113, 115) configured to store data; a radio configured to receive data from and transmit data to neighbouring communication devices (110b-e) and/or a base station; and a security system configured to operate one or more sets of logically separated security domains (111a-c, 113a-c, 115a-c), including a first set of security domains (111a, 113a, 115a), on the processor and the memory (113, 115), wherein each set of security domains comprises a processor security domain (111a-c) and a memory security domain (113a-c, 115a-c); wherein the processor security domain of the first set of security domains (111a, 113a, 115a) is configured to route the data received from neighbouring communication devices (110b-e) to other neighbouring communication devices (110b-e) and/or the base station of the LPWA communication network on the basis of the routing scheme stored in the memory security domain (113a, 115a) of the first set of security domains (111a, 113a, 115a) and wherein the routing scheme is based on information about a respective security credibility of the respective neighbouring communication devices (110b-e) and wherein the processor security domain of the first set of security domains (111a, 113a, 115a) is configured to dynamically adjust the routing scheme stored in the memory security domain (113a, 115a) of the first set of security domains (111a, 113a, 115a) on the basis of information received from the neighbouring communication devices (110b-e) and/or a network management entity of the LPWA communication network.